{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,6]],"date-time":"2026-07-06T20:22:52Z","timestamp":1783369372316,"version":"3.54.6"},"reference-count":35,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/100019305","name":"Manipal Academy of Higher Education","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100019305","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Forensic Science International: Digital Investigation"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1016\/j.fsidi.2026.302073","type":"journal-article","created":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T06:56:38Z","timestamp":1772866598000},"page":"302073","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["A forensic analysis framework for IoMT network traffic using temporal reconstruction and artefact profiling"],"prefix":"10.1016","volume":"57","author":[{"given":"Cifha Crecil","family":"Dias","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7282-7726","authenticated-orcid":false,"given":"Vidya","family":"Rao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.fsidi.2026.302073_bib0005","doi-asserted-by":"crossref","first-page":"659","DOI":"10.1016\/j.future.2017.04.036","article-title":"Towards fog-driven IoT ehealth: promises and challenges of IoMT","volume":"78","author":"Farahani","year":"2018","journal-title":"Futur. Gener. Comput. Syst."},{"key":"10.1016\/j.fsidi.2026.302073_bib0010","series-title":"Computational Methods in Science and Technology","first-page":"302","article-title":"A study on electronic health records (ehr) in india: security challenges, initiatives and blockchain integration","author":"Bhargava","year":"2024"},{"issue":"5","key":"10.1016\/j.fsidi.2026.302073_bib0015","article-title":"Security and privacy challenges, issues, and enhancing techniques for internet of medical things: a systematic review","volume":"7","author":"Wani","year":"2024","journal-title":"Sec. Priv."},{"key":"10.1016\/j.fsidi.2026.302073_bib0020","doi-asserted-by":"crossref","first-page":"146","DOI":"10.1016\/j.comnet.2014.11.008","article-title":"Security, privacy and trust in the internet of things: a survey","volume":"76","author":"Sicari","year":"2015","journal-title":"Comput. Netw."},{"key":"10.1016\/j.fsidi.2026.302073_bib0025","doi-asserted-by":"crossref","first-page":"168774","DOI":"10.1109\/ACCESS.2019.2950849","article-title":"Survey: cybersecurity vulnerabilities, attacks and solutions in the medical domain","volume":"7","author":"Razaque","year":"2019","journal-title":"IEEE Access"},{"issue":"3","key":"10.1016\/j.fsidi.2026.302073_bib0030","first-page":"2017","article-title":"Mobile edge computing, fog ET al.: a survey and analysis of security threats","volume":"20","author":"Roman","year":"2018","journal-title":"IEEE Commun. Surv. Tutorials"},{"issue":"3","key":"10.1016\/j.fsidi.2026.302073_bib0035","first-page":"1","article-title":"Intrusion detection in internet of things systems: a review on design approaches, challenges, and future directions","volume":"22","author":"Gyamfi","year":"2022","journal-title":"Sensors"},{"key":"10.1016\/j.fsidi.2026.302073_bib0040","series-title":"Survey of intrusion detection systems: techniques, datasets and challenges, Cybersecurity","author":"Khraisat","year":"2019"},{"key":"10.1016\/j.fsidi.2026.302073_bib0045","first-page":"7331","article-title":"A lightweight and secure authentication protocol for internet of medical things","volume":"8","author":"Gupta","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.fsidi.2026.302073_bib0050","series-title":"2024 Eighth International Conference on Parallel, Distributed and Grid Computing (PDGC)","first-page":"388","article-title":"A survey ddos attack in IOT cloud platform","author":"Varghese","year":"2024"},{"key":"10.1016\/j.fsidi.2026.302073_bib0055","series-title":"2020 IEEE International Conference on Communications (ICC)","first-page":"1","article-title":"An iomt IDS based on traffic behaviour and machine learning","author":"Park","year":"2020"},{"key":"10.1016\/j.fsidi.2026.302073_bib0060","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2024.101351","article-title":"Ciciomt2024: a benchmark dataset for multi-protocol security assessment in IoMT","volume":"28","author":"Dadkhah","year":"2024","journal-title":"Internet of Things"},{"issue":"5","key":"10.1016\/j.fsidi.2026.302073_bib0070","doi-asserted-by":"crossref","first-page":"9042","DOI":"10.1109\/JIOT.2019.2926365","article-title":"A supervised intrusion detection system for smart home IoT devices","volume":"6","author":"Anthi","year":"2019","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.fsidi.2026.302073_bib0075","series-title":"2018 IEEE Security and Privacy Workshops (SPW)","first-page":"29","article-title":"Machine learning DDoS detection for consumer internet of things devices","author":"Doshi","year":"2018"},{"key":"10.1016\/j.fsidi.2026.302073_bib0080","article-title":"Guide to intrusion detection and prevention systems","volume":"800\u201394","author":"Scarfone","year":"2007","journal-title":"NIST Spec. Publ."},{"key":"10.1016\/j.fsidi.2026.302073_bib0085","doi-asserted-by":"crossref","first-page":"181560","DOI":"10.1109\/ACCESS.2020.3026260","article-title":"An intrusion detection system for internet of medical things","volume":"8","author":"Thamilarasu","year":"2020","journal-title":"IEEE Access"},{"key":"10.1016\/j.fsidi.2026.302073_bib0090","series-title":"2020 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)","first-page":"1","article-title":"Security and privacy in IOT smart healthcare: empirical methods and challenges","author":"Karunarathne","year":"2021"},{"key":"10.1016\/j.fsidi.2026.302073_bib0095","first-page":"321","article-title":"A review of the advancement in intrusion detection datasets","volume":"173","author":"Thakkar","year":"2020","journal-title":"Proc. Comput. Sci."},{"key":"10.1016\/j.fsidi.2026.302073_bib0100","series-title":"Proceedings of the 4th International Conference on Information Systems Security and Privacy (ICISSP)","first-page":"108","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization","author":"Sharafaldin","year":"2018"},{"key":"10.1016\/j.fsidi.2026.302073_bib0105","series-title":"Digital Evidence and Computer Crime","author":"Casey","year":"2011"},{"key":"10.1016\/j.fsidi.2026.302073_bib0110","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2019.101677","article-title":"Cybersecurity for industrial control systems: a survey","volume":"89","author":"Bhamare","year":"2020","journal-title":"Comput. Secur."},{"key":"10.1016\/j.fsidi.2026.302073_bib0115","series-title":"Proceedings of the 11th International Conference on Information Systems Security and Privacy (ICISSP)","first-page":"248","article-title":"Comprehensive feature selection for machine learning-based intrusion detection in healthcare IoMT networks","author":"Rehman","year":"2025"},{"key":"10.1016\/j.fsidi.2026.302073_bib0120","series-title":"Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining","first-page":"1135","article-title":"\u201cwhy should i trust you?\u201d: explaining the predictions of any classifier","author":"Ribeiro","year":"2016"},{"key":"10.1016\/j.fsidi.2026.302073_bib0125","first-page":"32305","article-title":"Flow-based IOT traffic analysis for anomaly detection","volume":"9","author":"Alshaqaq","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.fsidi.2026.302073_bib0130","first-page":"57732","article-title":"Unsw-nb15: a comprehensive data set for network intrusion detection systems","volume":"8","author":"Moustafa","year":"2020","journal-title":"IEEE Access"},{"key":"10.1016\/j.fsidi.2026.302073_bib0135","first-page":"50","article-title":"Internet traffic classification using Bayesian analysis techniques","author":"Moore","year":"2005","journal-title":"ACM SIGMETRICS"},{"issue":"4","key":"10.1016\/j.fsidi.2026.302073_bib0140","doi-asserted-by":"crossref","first-page":"56","DOI":"10.1109\/SURV.2008.080406","article-title":"A survey of techniques for internet traffic classification","volume":"10","author":"Nguyen","year":"2008","journal-title":"IEEE Commun. Surv. Tutorials"},{"issue":"10","key":"10.1016\/j.fsidi.2026.302073_bib0145","doi-asserted-by":"crossref","first-page":"2266","DOI":"10.1016\/j.comnet.2012.12.018","article-title":"On the features and challenges of security and privacy in distributed internet of things","volume":"57","author":"Roman","year":"2013","journal-title":"Comput. Netw."},{"key":"10.1016\/j.fsidi.2026.302073_bib0150","series-title":"Cyber Risk Management for the Internet of Things","author":"Radanliev","year":"2019"},{"key":"10.1016\/j.fsidi.2026.302073_bib0155","series-title":"2019 29th International Telecommunication Networks and Applications Conference (ITNAC)","first-page":"1","article-title":"Digital forensic readiness in wireless medical systems","author":"Kyaw","year":"2019"},{"issue":"3","key":"10.1016\/j.fsidi.2026.302073_bib0160","first-page":"166","article-title":"Modeling the inter-arrival time of packets in network traffic and anomaly detection using the zipf\u2019s law","volume":"6","author":"Naghash Asadi","year":"2018","journal-title":"J. Inf. Syst. Telecommun."},{"issue":"1","key":"10.1016\/j.fsidi.2026.302073_bib0165","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1023\/A:1010933404324","article-title":"Random forests","volume":"45","author":"Breiman","year":"2001","journal-title":"Mach. Learn."},{"key":"10.1016\/j.fsidi.2026.302073_bib0170","author":"Doshi-Velez"},{"issue":"5","key":"10.1016\/j.fsidi.2026.302073_bib0175","doi-asserted-by":"crossref","DOI":"10.1145\/3236009","article-title":"A survey of methods for explaining black box models","volume":"51","author":"Guidotti","year":"2018","journal-title":"ACM Comput. Surv."},{"issue":"12","key":"10.1016\/j.fsidi.2026.302073_bib0180","doi-asserted-by":"crossref","first-page":"1893","DOI":"10.3390\/electronics11121893","article-title":"Towards secure and intelligent internet of health things","volume":"11","author":"Zaman","year":"2022","journal-title":"Electronics"}],"container-title":["Forensic Science International: Digital Investigation"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2666281726000302?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2666281726000302?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,6]],"date-time":"2026-07-06T20:10:14Z","timestamp":1783368614000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2666281726000302"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":35,"alternative-id":["S2666281726000302"],"URL":"https:\/\/doi.org\/10.1016\/j.fsidi.2026.302073","relation":{},"ISSN":["2666-2817"],"issn-type":[{"value":"2666-2817","type":"print"}],"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"A forensic analysis framework for IoMT network traffic using temporal reconstruction and artefact profiling","name":"articletitle","label":"Article Title"},{"value":"Forensic Science International: Digital Investigation","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.fsidi.2026.302073","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"302073"}}