Using Clustering for Forensics Analysis on Internet of Things

2.1. IOT Architecture

In IoT, each layer is defined by its functions and the devices that are used in that layer. There are different opinions regarding the number of layers in IoT. However, according to the literature (Zhao & Ge, 2013; Atzori et al., 2012; Leo et al., 2014), the IoT mainly operates on three layers termed as Perception, Network, and Application layers (Tewari & Gupta, 2018). Each layer has inherent security issues associated with it. Figure 1 shows the basic three the layers of the IoT framework with respect to the devices and technologies that encompass each layer:

• 1.

  Perception Layer: The perception layer is also known as the Sensors layer in IoT. The purpose of this layer is to acquire the data from the environment with the help of sensors and actuators. This layer detects, collects, and processes information and then transmits them to the network layer. This layer also performs the IoT node collaboration in local and short range networks (Atzori et al., 2012);

• 2.

  Network Layer: The network layer of IoT serves the function of data routing and transmission to different IoT hubs and devices over the Internet. At this layer, cloud computing platforms, Internet gateways, switching, and routing devices etc. operate by using some of the very recent technologies such as Wi-Fi, LTE, Bluetooth, 3G, Zigbee etc. The network gateways serve as the mediator between different IoT nodes by aggregating, filtering, and transmitting data to and from different sensors (Leo et al., 2014);

• 3.

  Application Layer: The application layer guarantees the authenticity, integrity, and confidentiality of the data. At this layer, the purpose of IoT or the creation of a smart environment is achieved.

Figure 1.

Three Layer IOT Architecture (Tewari & Gupta, 2018)