Applying the ACPO Guidelines to Building Automation Systems Iain Sutherland 1,3( ✉ ) , Theodoros Spyridopoulos 2 , Huw Read 1,4 , Andy Jones 3,4 , Graeme Sutherland 5 , and Mikhailia Burgess 1 1 Noroff University College, 4608 Kristiansand S, Vest Agder, Norway Iain.sutherland@noroff.no 2 Faculty of Engineering, University of Bristol, Bristol, UK 3 Security Research Institute, Edith Cowan University, Perth, Australia 4 Faculty of Computing, Engineering and Science, University of South Wales, Pontypridd, UK 5 North Building Technologies, 95 Ditchling Road, Brighton, UK Abstract. The increasing variety of Internet enabled hardware devices is creating a world of semi-autonomous, interconnected systems capable of control, automation and monitoring of a built environment. Many building automation and control systems that have previously been limited in connectivity, or due to cost only used in commercial environments, are now seeing increased uptake in domestic environments. Such systems may lack the management controls that are in place in commercial environments. The risk to these systems is further increased when they are connected to the Internet to allow control via a web browser or smartphone application. This paper explores the application of tradi‐ tional digital forensics practices by applying established good practice guidelines to the field of building automation. In particular, we examine the application of the UK Association of Chief Police Officers guidelines for Digital Evidence, identifying the challenges and the gaps that arise in processes, procedures and available tools. Keywords: Building control system · Forensics · ACPO · Embedded systems 1 Introduction Building Automation Systems (BAS) 1 have been around for a number of decades with the technology used in commercial premises such as hotels and shopping centers to monitor and control various aspects of the building. Provided functionality includes environmental controls (air conditioning, lighting), security systems (alarms, security shutters and fire control systems) and transport systems (lifts, escalators and walkways) [1]. One advantage of building automation is that it enables the most efficient use of buildings’ environmental controls, so reducing costs for owners. In addition to being commonly used in office and retail structures these automation systems are also used in specialist settings such as law enforcement and prison access systems. These systems 1 Sometimes also referred to as Building Control Systems, Intelligent or Smart buildings. © Springer International Publishing Switzerland 2015 T. Tryfonas and I. Askoxylakis (Eds.): HAS 2015, LNCS 9190, pp. 684–692, 2015. DOI: 10.1007/978-3-319-20376-8_61