Internet of Medical Things: Forensics Investigation on Zebra Phones

The Internet of Things (IoT) encompasses many connected devices that have brought considerable improvements, entertainment, and convenience to everyday lives. From asking Alexa to say the weather, looking at the heart rate on the fitness tracker, reviewing home security cameras, or creating a grocery list on the fridge, IoT's have improved the efficiency of everyday lives. One emerging aspect of IoT is the Internet of Medical Devices (IoMT). Telehealth is one of the fastest-growing categories in health care world worldwide. As more people age in place, the adoption of IoMT devices can give a doctor a constant detail about her patients. Telehealth has been drastically improved by the integration of IoMT devices, which can report on oxygen levels, blood pressure, heart rate, blood sugar and more from the comfort of a patient's home. IoMT devices are not limited to home-care devices, rather hospital rooms rely on the sensors and devices to keep tabs on a patient during their stay in the hospital. In this research, we are analyzing a common IoMT communication device, a Zebra phone. The Zebra phone has a proprietary operating system that is not seen on other consumer phones. This research conducts forensic investigations on two Zebra phones to understand what vulnerabilities are introduced by the device, how they can be exploited, how they can be better protected, and how they can be investigated if compromised.