ATLANTIS PRESS Advances in Engineering Research, volume 211 International Conference on Science and Engineering (ICSE-UIN-SUKA 2021) Digital Forensics Investigation on Xiaomi Smart Router Using SNI ISO/IEC 27037:2014 and NIST SP 800-86 Framework Dedy Hariyadi1 Mandahadi Kusuma 2,* Adkhan Sholeh 1, Fazlurrahman 1 1 Universitas Jenderal Achmad Yani, Yogyakarta, Indonesia 2 Universitas Islam Negeri Sunan Kalijaga, Yogyakarta, Indonesia *Corresponding author. Email: mandahadi.kusuma@uin-suka.ac.id ABSTRACT The factual conditions reinforced by research data show the increasing number of connected smart devices in a house. The interconnection of these smart devices is able to form a smart home ecosystem with capabilities in the form of file sharing services, multimedia services, access to the internet network, to surveillance applications. Today's smart home interconnection is supported by the use of smart routers. The existence of the threat of exploitation of security gaps in the smart home ecosystem requires mitigation steps after cyber attacks on the smart home ecosystem. The research proposes a digital forensic investigation on the Xiaomi Smart Router using NIST SP 800-86 and SNI ISO/IEC 27037:2014 in a smart home ecosystem. Based on the findings in this study, to obtain and secure potential digital evidence from the Xiaomi Smart Router using the live acquisition method through the Xiaomi Smart Router web interface and the Mi Wi-Fi application installed on an Android smartphone. Live acquisition via the Xiaomi Smart Router web interface using web scraping techniques to obtain and secure digital evidence in the form of smart router device logs. Meanwhile, the digital evidence found from the Mi Wi-Fi application is a SQLite database file. Keywords: Digital Forensics, Live Acquisition, Smart Home, Smart Router, Xiaomi. 1. INTRODUCTION It is predicted that the installed and interconnected smart devices in the home will increase about 20 times by 2023 [1]. Smart devices installed in homes cannot stand alone, these smart devices require a connector or gateway so that they can be connected to each other using either wired or wireless media [2]. -. Figure 1 Home Network Topology In general, the smart devices installed in the smart home have a topology as shown in Figure 1, between the smart device or node and the client connected to the internet through the gateway. Meanwhile, smart home services can also be accessed via public networks or the internet [3]. Internet of Things (IoT) is an object that can communicate, connect with each other, and share information through internet media including its control system [4]. According to the National Institute of Standards and Technology (NIST), smart devices that are a real form of IoT technology have affected on information security. NIST divides into three IoT capabilities that have the potential risk of affecting information security, they are; signaling capabilities, interface capabilities, and service support capabilities, as shown in Figure 2 [5]. This article focuses on the potential risks that affect information security in the IoT interface capability section with a digital forensics approach as a form of mitigation after a cyber attack Copyright @ 2021 The Authors. Published by Atlantis Press