DFRWS 2005 Program and Proceedings

The DFRWS 2005 Agenda below summarizes the 2005 Workshop's program of discussion and research.

Tuesday, August 16, 2005

5:00pm Registration and Welcome Reception
Sponsored by Elsevier and The Journal of Digital Investigation

Wednesday, August 17, 2005

8:00am Registration and Breakfast (provided)
9:15am Opening Remarks
9:30am Keynote Address
Wietse Venema, IBM: Forensic Discovery (slides)
10:30am Break
10:45am SESSION 1: Data Hiding and Counter Forensics
Chair: Golden G. Richard III
  • Best Paper Award: Knut Eckstein (NC3A) and Marko Jahnke (FGAN/FKIE): Data Hiding in Journaling File Systems (paper | slides) (Best Paper Award)
  • Matthew Geiger, Carnegie Mellon University: Evaluating Commercial Counter-Forensic Tools (paper | slides)
  • Frank Adelstein (ATC-NY), Yun Gao and Golden G. Richard III (University of New Orleans): Automatically Creating Realistic Targets for Digital Forensics Investigation (paper | slides)
12:15pm Breakout Lunch
2:00pm SESSION 2: Research Needs of Law Enforcement Chair: Eoghan Casey
Panel: Detective Marc Ortiz (Kenner Police Department), Todd Shipley (SEARCH) and Philip Turner (QinetiQ)
3:15pm Break
3:30pm SESSION 3: Scalability and Automation
Chair: Daryl Pfief
  • Brian D. Carrier and Eugene H. Spafford (Purdue University): Automated Digital Evidence Target Definition Using Outlier Analysis and Existing Evidence (paper | slides)
  • A. Chris Bogen (United States Army Corps of Engineers) and Dr. David A. Dampier (Mississippi State University): Preparing for Large-Scale Investigations with Case Domain Modeling (paper | slides)
4:30pm Presentation of DFRWS 2005 Forensics Challenge Results
Lead: Eoghan Casey

Thursday, August 18, 2005

9:00am Breakfast (provided)
9:30am SESSION 4: Network and File System Analysis
Chair: Vassil Roussev
  • Wm. Blair Gillam and Marc Rogers (Purdue University): File Hound: A Forensics Tool for First Responders (paper | slides)
  • Christian G. Sarmoria, Steve J. Chapin (Syracuse University): Monitoring Access to Shared Memory-Mapped Files (paper | slides)
  • Wei Wang and Thomas E. Daniels (Iowa State University): Network Forensics Analysis with Evidence Graphs (paper)
11:00am Break
11:15am SESSION 5: Legal and Certification Issues
Chairs: Michael Losavio and Marcus Rogers
Panel: Mohamed Battisha, Mark Wettle, Esq. and Joseph K. West, Esq (Entergy Corporation)
12:15pm Breakout Lunch
2:00pm SESSION 6: Digital Forensics Tools
Chair: Brian Carrier
  • Florian Buchholz and Courtney Falk (Purdue University): Design and Implementation of Zeitline: a Forensic Timeline Editor (paper | slides)
  • Philip Turner, QinetiQ: Unification of Digital Evidence from Disparate Sources (Digital Evidence Bags) (paper | slides)
  • Golden G. Richard III and Vassil Roussev (University of New Orleans): Scalpel: A Frugal, High Performance File Carver (paper)
3:30pm Break
3:45pm Organization and Documentation of Breakout Lunch Topics
4:15pm Presentation and Discussion of Breakout Lunch Topics
With Group Leaders
5:00pm Demonstrations of Research Projects and Tools
  • Sudhir Aggarwal, FSU: Anti-cyberstalking: the Predator and Prey Alert System
  • Eoghan Casey (Stroz Friedberg) and Steve Mead (NIST): File Fragment Scanning
  • John Ward, I.D.E.A.L. Technology Corporation: STRIKE! Real-Time Extraction of Actionable Intelligence
7:00pm DFRWS 2005 Banquet
Digital Forensics Rodeo and Jeopardy
Presentation of Best Paper Award
Elsevier's Digital Investigation Awards

Friday, August 19, 2005

9:00am Breakfast (provided)
9:30am SESSION 8: Collection and Processing of Digital Evidence
Chair: Eoghan Casey
  • Lei Pan and Lynn M. Batten (Deakin University, Australia): Reproducibility of Digital Evidence in Forensic Investigations (paper | slides)
  • Erin E. Kenneally (San Diego Supercomputer Center) and Christopher L. T. Brown (Technology Pathways, LLC): Risk Sensitive Digital Evidence Collection (paper | slides)
11:00 Break
11:15am Works in Progress
Chair: Daryl Pfeif
Short Presentations (10 minutes each)
12:30pm Closing Remarks & Participant Feedback
Lunch & DFRWS 2006 Planning Session
open to all participants at La Louisiane

Breakout Lunches

To encourage discussion and collaboration among participants, DFRWS is organizing breakout lunches. The lunches will be organized by DFRWS, but are not included in the registration cost. Each day, you will have several restaurants to choose from and each will have a theme or interest area, such as legal topics, practitioner topics, tool building, live forensics, distributed processing, etc. Each restaurant will be within a 5-10 minute walk from the hotel, and a sample menu will be available. Signup sheets will be available each morning.

Short Presentations / Works in Progress

The Short Presentations / Works in Progress session is a forum open to anyone interested in presenting topics that would not merit a full time slot, perhaps because it is on-going work or it is at an early idea stage. The only limitations are on the time and number of slides, specifically 10 minutes and 3 slides. Participants can use this time as a sounding board to judge the interest of other researchers or practitioners. Presentation slots will be allocated on a strictly first come, first serve basis. Talk to Daryl Pfeif anytime during the workshop to sign up for a slot; she will be managing the schedule.

©2001-2014 DFRWS   |   dfrws [at] dfrws [dot] org  

DFRWS is a US 501(c)(3) non-profit organization.