Investigating IP Camera Hacking: Comparing HIKVISION DVR Logs with Suspect’s PC and Mobile Phone Artifacts in Local and Exterior Network Environment

The global prevalence of IP cameras has led to a significant increase in privacy violations due to unauthorized access, with HIKVISION DVRs being a frequent target. This study aims to establish a rigorous forensic methodology for investigating such hacking incidents. We employ a controlled digital forensic simulation using a 2x2 factorial design to model four distinct attack scenarios: (1) Local Network/PC, (2) Local Network/Mobile, (3) Exterior Network/PC, and (4) Exterior Network/Mobile. The primary objective is to validate the evidentiary value of correlating specific Victim DVR Logs with Suspect Device Artifacts. We will analyze 9 key measures from HIKVISION DVR logs (including Operation, Exception, and Information logs) and compare them against forensic artifacts recovered from suspect devices, specifically Web Browser history/bookmarks (Chrome, Edge, Firefox) and Android application artifacts. The results will provide a validated procedural guide for investigators, prosecutors, and courts to prove suspect attribution in IP camera hacking cases.