Sunday, August 3, 2014
11:30 AMRegistration Opens
Workshop Track 1Workshop Track 2
1:00 PMGRR Tutorial Part 1RE(:) go
3:00 PMGRR Tutorial Part 2SQLite Analysis
(Note: this session runs 3:00pm-5:00pm)
5:30 PMRegistration closes
Monday, August 4, 2014
9:00 AMOpening Remarks - Wietse Venema
9:15 AMKeynote Address
Catalin Grigoras (University of Colorado at Denver)
10:15 AMBreak
10:30 AMSESSION 1: Memory
Chair: Josiah Dykstra
"In Lieu of Swap: Analyzing Compressed RAM in Mac OS X and Linux" by Golden G. Richard III and Andrew Case -- Best Paper
"Image-Based Kernel Fingerprinting" by Vassil Roussev, Irfan Ahmed and Thomas Sires
"Testing the Forensic Soundness of Forensic Examination Environments on Bootable Media" by Ahmed Abdel Latif Mohamed, Andrew Marrington, Farkhund Iqbal and Ibrahim Baggili
12:00 PMLunch on your own
2:00 PMSESSION 2: Files
Chair: Elizabeth Schweinsberg
"Design Tradeoffs for Developing Fragmented Video Carving Tools" by Eoghan Casey and Rikkert Zoun
"Extracting Hidden Messages in Steganographic Images" by Tu-Thach Quach
3:00 PMBreak
3:30 PMPRESENTATIONS I
Chair: Vassil Roussev
"The National Software Reference Library" by Douglas White (NIST)
"These Logs Were Made for Talking" by Matt Bromiley (505Forensics)
"Information Assurance in a distributed forensic cluster - FCluster and FClusterfs" by Nick Pringle and Mikhaila Burgess (University of South Wales)
"Enabling Digital Forensics Practices in Libraries, Archives and Museums: The BitCurator Experience" by Christopher A. Lee and Kam Woods (University of North Carolina, Chapel Hill)
4:30 PMFive-Minute Teasersfor Tool Demos and poster session
5:00 PMWelcome Reception(Poster and Demo session)
Tuesday, August 5, 2014
8:00 AMRegistration/Breakfast
9:00 AMAdministrative Remarks
9:05 AMKeynote Address
Travis Goodspeed
10:00 AMBreak
10:30 AMSESSION 3: Non-traditional devices
Chair: Golden Richard
"Cooperative mode: Comparative storage metadata verification applied to the Xbox 360" by Alex Nelson, Erik Steggall and Darrell Long
"Preliminary forensic analysis of the Xbox One" by Jason Moore, Ibrahim Baggili, Andrew Marrington and Armindo Rodrigues
"Digital Investigations for IPv6-Based Wireless Sensor Networks" by Vijay Kumar, George Oikonomou, Theo Tryfonas, Dan Page and Iain Phillips
12:00 PMLunch on your own
2:00 PMSESSION 4: Formalisms
Chair: Frank Adelstein
"Developing a New Digital Forensics Curriculum" by Anthony Lang, Masooda Bashir, Roy Campbell and Lizanne Destefano
"VMI-PL: A Monitoring Language for Virtual Platforms Using Virtual Machine Introspection" by Florian Westphal, Stefan Axelsson, Christian Neuhaus and Andreas Polze
"A Complete Formalized Knowledge Representation Model for Advanced Digital Forensics Timeline Analysis" by Yoan Chabot, Aurelie Bertaux, Christophe Nicolle and Tahar Kechadi
3:15 PMBreak
3:30 PMPRESENTATIONS II
Chair: Simson Garfinkel
"The Regional Computer Forensics Lab System" by Sean K. O'Brien (FBI)
"Memory Forensics with Hyper-V Virtual Machines" by Wyatt Roersm (NVINT)
"The application of reverse engineering techniques against the Arduino microcontroller to acquire uploaded applications" by Steve Watson (Intel)
4:45 PMDFRWS 2014 Forensic Challenge presentations and prizes
6:00 PMBanquet
Best Paper Award
7:30 PMForensic Rodeo
Champions:idontworkatgoogle: Andreas Moser, Eric Mak and Johannes Stuettgen.
Wednesday, August 6, 2014
8:00 AMRegistration/Breakfast
9:00 AMSESSION 5: Data acquisition & mining
Chair: Wietse Venema
"A forensically robust method for acquisition of iCloud data" by Kurt Oestreicher
"Multidimensional Investigation of Source Port 0 Probing" by Elias Bou-Harb, Nour-Eddine Lakhdari, Hamad Binsalleeh and Mourad Debbabi -- Best Student Paper
"Ranking algorithms for digital forensic string search hits" by Nicole Beebe and Lishu Liu
11:00 AMShort Presentations & Works in Progress
(5 minutes each)
11:15 AMClosing Comments
11:30 AMLunch on your own
Workshop Track 1Workshop Track 2
1:00 PMTimeline AnalysisMemory Forensics, beginner level
6:30 PMDinner & DFRWS 2015 / 2016 Planning Session
(Not Included in Registration Fee)
Thursday, August 7, 2014
9:00 AMDigital Forensics Curriculum Standards 2nd Workshop (8 hours)