--- title: Forensic analysis at the edge with the BlackBox App description: "When an incident occurs at the edge, you want to have as many insights & data as possible to understand what led to this incident: enter the Blackbox app." image: https://hubspot.sixsq.com/hubfs/Blog%20post%20images/blackbox-blog-title-min.png --- [![sixsq.png](https://hubspot.sixsq.com/hs-fs/hubfs/sixsq-an-ekinops-company-red-on-transparent-1024px.png?width=1024&height=512&name=sixsq-an-ekinops-company-red-on-transparent-1024px.png "sixsq.png")](https://hubspot.sixsq.com/) - [NUVLA.IO](https://sixsq.com/products-and-services/nuvla-io/overview) - SOFTWARE - [**NUVLABOX:** SOFTWARE THAT TURNS YOUR HARDWARE INTO A SMART EDGE DEVICE](https://sixsq.com/products-and-services/nuvlabox/overview) - [**NUVLA:** THE OPEN SOURCE SOFTWARE BEHIND NUVLA.IO](https://sixsq.com/products-and-services/nuvla/overview) - CASESTUDIES - [**CITY:** EDGE, CLOUD AND IOT SOLUTIONS FOR SMART CITIES](https://sixsq.com/casestudies/city/overview) - [**OUTPOST:** RAPID INFRASTRUCTURE FOR REMOTE AREAS](https://sixsq.com/casestudies/outpost/overview) - [**RETAIL:** IN-STORE (REAL-TIME) ANALYTICS](https://sixsq.com/casestudies/retail/overview) - [**SCIENCE:** BIG DATA AT THE EDGE AND IN THE CLOUD FOR SCIENCE](https://sixsq.com/casestudies/science/overview) - MEDIA - [OVERVIEW](https://sixsq.com/media/overview) - [NEWS](https://sixsq.com/media/news) - [VIDEOS](https://sixsq.com/media/videos) - [BLOG](https://media.sixsq.com/blog) - ABOUT - [ABOUT US](https://sixsq.com/about/about-us) - [CONTACT](https://sixsq.com/about/contact) - [CUSTOMERS](https://sixsq.com/about/customers) - [PARTNERS](https://sixsq.com/about/partners) - [R&D](https://sixsq.com/about/r-and-d) - [JOBS](https://sixsq.com/about/jobs) - [TERMS](https://sixsq.com/about/terms) - [SIGN-IN](https://nuvla.io/ui/sign-in) - [SIGN-UP](https://nuvla.io/ui/sign-up) 1 September 2021 # Forensic analysis at the edge with the BlackBox App Posted by [Marc-Elian Bégin](https://hubspot.sixsq.com/blog/author/marc-elian-bégin) on 1 September 2021 ##### [Edge computing](https://hubspot.sixsq.com/blog/case-for-edge-computing) systems work in a semi-autonomous way, which is great for providing fast responses, no privacy intrusion and reduced costs from network and cloud storage. But when an incident occurs, you want to archive to the cloud as much data as possible to give you insights into what led to this incident: enter the Blackbox app. ## Protecting critical data When an aeroplane crashes, we need to know what happened, not least to prevent the same thing from happening again. The onboard blackbox is crucial in this case as it contains data that will help solve the puzzle. During normal operations, applications running at the edge are autonomous and go about their business processing data. From this data, only valuable information is transferred to the cloud, delivering the network and storage cost savings that we love about edge computing. Suddenly, a *significant event* occurs. This could be a critical failure, a crash, an accident or a cyber attack. Then we need the relevant recent data to be archived and protected, just like in an aeroplane. This requirement motivated SixSq Software Engineer [Lionel Schaub](https://www.linkedin.com/in/lionel-s-65a44459/) to develop the BlackBox app. The BlackBox app kicks in when a significant event is detected. It creates an encrypted virtual blackbox, containing all the data it can lay its hands on, and ships it to the cloud for forensic analysis. ## How it works [Nuvla.io](https://nuvla.io/), SixSq's edge-to-cloud platform and marketplace, is built to make your life easy when managing devices and applications at the edge. With the [NuvlaBox Engine software](https://sixsq.com/products-and-services/nuvlabox/overview) you can turn your ARM or x86 computer into a smart edge device, then install and manage your apps with ease. Now with the added protection of the BlackBox app, you can be sure not to miss anything.  The BlackBox app records all the data processed by the edge device.  The local storage is on a rotation, and older data is replaced by new data. This will include, for example, video and audio feeds, as well as any other source of data connected to the edge device, such as sensor and machine measurements of all kinds. The diagram below gives an overview of the workflow.  [![Blackbox app overall architecture](https://hubspot.sixsq.com/hs-fs/hubfs/bb-overview2-3.png?width=716&name=bb-overview2-3.png)](https://hubspot.sixsq.com/hs-fs/hubfs/bb-overview2-3.png) *Figure 1: General overview of the Blackbox* When a significant event is detected, typically by another app running in the same edge device, a command is sent to the BlackBox app to create a virtual blackbox. ## Inbuilt security  The BlackBox app then automatically archives all the available data. However, before it ships the virtual blackbox to its recipient, it encrypts and signs its content to protect any sensitive data it may contain. For the same reason you don't want video and audio feeds to go to the cloud over the wide area network, you don't want the virtual blackbox to leave the edge without maximum security. For this we use asymmetric key encryption. When the BlackBox app is deployed, a public key is used by the app to encrypt the archive. Therefore, only the holder of the private key will be able to decrypt it. SixSq doesn't hold this private key, which makes the overall setup very secure. The virtual blackbox is then pushed to the cloud where it can be retrieved and analysed. The value of the data contained in the virtual blackbox far outweighs any network and storage costs incurred. Finally, the user is informed by the [notification and alert feature](https://hubspot.sixsq.com/blog/edge-computing-notifications-and-alerts) of Nuvla.io. The message includes a direct link to [Nuvla.io](http://nola.io/) which authenticates the user and allows direct download of the virtual blackbox. Then, using the private key, the user can decrypt the archive and access all the data leading to the significant event that triggered its creation. [![Blackbox app local architecture](https://hubspot.sixsq.com/hs-fs/hubfs/bb-overview.png?width=2000&name=bb-overview.png)](https://hubspot.sixsq.com/hubfs/bb-overview.png) *Figure 2: Detailed view of how the Blackbox creates an archive and sends it.* ## Simple and efficient framework In terms of architecture, the BlackBox app follows best practices, using a local data bus to organise data inside each edge device. Our NuvlaBox Engine software is composed of micro services. It includes a message bus service (i.e. MQTT) used by the BlackBox app to collect data. Therefore, as long as other apps push their data (raw or pre-processed) to the message bus, the BlackBox app will be able to add the data to a virtual blackbox archive. The solution is therefore simple, yet efficient, and moreover maintenance free. Sign up for your free trial of Nuvla.io [here](https://nuvla.io/ui/sign-up). Find the BlackBox app in the Nuvla.io Marketplace [here](https://nuvla.io/ui/apps/sixsq/blackbox), including a complete description, license details and affordable pay-as-you-go pricing. And like all other apps in the marketplace, it can be deployed in a click. As always, if you need help or have questions along the way, get in touch.  [![Contact us »](https://no-cache.hubspot.com/cta/default/475360/2d086738-8959-47bb-9019-a19cff852107.png)](https://cta-redirect.hubspot.com/cta/redirect/475360/2d086738-8959-47bb-9019-a19cff852107) Stay safe and healthy, at the edge! Facebook Twitter Facebook Google+ LinkedIn [Email](mailto:?body=https://hubspot.sixsq.com/blog/forensic-analysis-at-the-edge-with-blackbox-app) ### Filed Under: [Edge](https://hubspot.sixsq.com/blog/topic/edge), [IoT](https://hubspot.sixsq.com/blog/topic/iot), [edge computing](https://hubspot.sixsq.com/blog/topic/edge-computing), [Edge-to-Cloud](https://hubspot.sixsq.com/blog/topic/edge-to-cloud), [Edge-to-Edge](https://hubspot.sixsq.com/blog/topic/edge-to-edge), [privacy](https://hubspot.sixsq.com/blog/topic/privacy), [security](https://hubspot.sixsq.com/blog/topic/security), [edgetocloud](https://hubspot.sixsq.com/blog/topic/edgetocloud), [edge applications](https://hubspot.sixsq.com/blog/topic/edge-applications) Ready to start your journey to the edge with our edge-to-cloud open platform? [![Go to Nuvla.io](https://no-cache.hubspot.com/cta/default/475360/6a9634b2-d1da-4f1e-81b7-c4e8b5ca109a.png)](https://cta-redirect.hubspot.com/cta/redirect/475360/6a9634b2-d1da-4f1e-81b7-c4e8b5ca109a) ### Comments ### RECENT POSTS [Privacy intrusion: Hold all the cards with edge computing](https://hubspot.sixsq.com/blog/privacy-intrusion-hold-all-the-cards-with-edge-computing) [What makes a smart city even smarter? Shared edge infrastructure](https://hubspot.sixsq.com/blog/what-makes-a-smart-city-even-smarter) ### Posts by Topic - [edge computing (18)](https://hubspot.sixsq.com/blog/topic/edge-computing) - [Edge-to-Cloud (13)](https://hubspot.sixsq.com/blog/topic/edge-to-cloud) - [IoT (11)](https://hubspot.sixsq.com/blog/topic/iot) - [Edge (8)](https://hubspot.sixsq.com/blog/topic/edge) - [Smart Cities (7)](https://hubspot.sixsq.com/blog/topic/smart-cities) - [edgetocloud (7)](https://hubspot.sixsq.com/blog/topic/edgetocloud) - [near data processing (7)](https://hubspot.sixsq.com/blog/topic/near-data-processing) - [privacy (6)](https://hubspot.sixsq.com/blog/topic/privacy) - [Edge-to-Edge (5)](https://hubspot.sixsq.com/blog/topic/edge-to-edge) - [security (5)](https://hubspot.sixsq.com/blog/topic/security) - [BigData (4)](https://hubspot.sixsq.com/blog/topic/bigdata) - [Cloud Basics (4)](https://hubspot.sixsq.com/blog/topic/cloud-basics) - [Cloud for Business (4)](https://hubspot.sixsq.com/blog/topic/cloud-for-business) - [Edge IoT (3)](https://hubspot.sixsq.com/blog/topic/edge-iot) - [Docker Swarm (2)](https://hubspot.sixsq.com/blog/topic/docker-swarm) - [Industry 4.0 (2)](https://hubspot.sixsq.com/blog/topic/industry-4-0) - [AI (1)](https://hubspot.sixsq.com/blog/topic/ai) - [Artificial Intelligence (1)](https://hubspot.sixsq.com/blog/topic/artificial-intelligence) - [continuous deployment (1)](https://hubspot.sixsq.com/blog/topic/continuous-deployment) - [data management (1)](https://hubspot.sixsq.com/blog/topic/data-management) - [devops (1)](https://hubspot.sixsq.com/blog/topic/devops) - [edge applications (1)](https://hubspot.sixsq.com/blog/topic/edge-applications) - [edge management (1)](https://hubspot.sixsq.com/blog/topic/edge-management) - [orchestration (1)](https://hubspot.sixsq.com/blog/topic/orchestration) - [testing (1)](https://hubspot.sixsq.com/blog/topic/testing) see all ### Subscribe to Email Updates ### SHARE Facebook Twitter Facebook Google+ LinkedIn [Email](mailto:?body=https://hubspot.sixsq.com/blog/forensic-analysis-at-the-edge-with-blackbox-app) [![sixsq.png](https://hubspot.sixsq.com/hs-fs/hubfs/sixsq-an-ekinops-company-red-on-transparent-1024px.png?width=1024&height=512&name=sixsq-an-ekinops-company-red-on-transparent-1024px.png "sixsq.png")](https://hubspot.sixsq.com/) © 2026 SixSq