DFRWS 2004 Program and Proceedings

The DFRWS 2004 Agenda below summarizes the 2003 Workshop's program of discussion and research. For further information about the presenters and speakers who made the Workshop a success, visit the People section. For event photos from DFRWS 2004, visit the Photo Gallery.

Tuesday, August 10, 2004

7:00pm Meet and Greet
Cocktails and Appetizers (2 hours)

Wednesday, August 11, 2004

8:00am Continental Breakfast
8:30am Welcome & Introduction
9:00am Keynote Address
Mr. Mark Pollitt: A Framework for Digital Forensic Science (slides)
9:45am Briefing
Florence Tushabe, Makerere University, Kampala Uganda: The Enhanced Digital Investigation Process Model (paper and slides)
10:20am Mid Morning Break
10:30am Briefings
  • Nicole Beebe, University of Texas at San Antonio: A Hierarchical, Objectives-Based Framework for the Digital Investigations Process (paper and slides)
  • Brian Carrier, Purdue University, West Lafayette, IN: An Event-Based Digital Forensic Investigation Framework (paper and slides)
  • Ren Wei, Zhongnan University of Economics and Law, China: A Framework of Distributed Agent-based Network Forensics System (slides)
12:15pm Lunch
1:15pm Panel Discussion
A panel of representatives from various domains address issues surrounding the framework and field questions from the attendees. Panel members from:
  • Law Enforcement: Jim Christy
  • Business sector: Chet Hosmer
  • Forensic Training: Chris Sanft
2:15pm Workgroup Assignments
Attendees assigned to groups, leaders, facilitators and recorders introduced, and meeting locations designated.
2:30pm Workgroup Breakouts
Groups will meet, debate, discuss and document details of their particular topic area. Refreshments Available.
4:30pm Workgroup Briefings
Group will brief their findings to the plenary session.
6:00pm End of Day

Thursday, August 12, 2004

8:00am Continental Breakfast
8:30am Introduction
Synopsis of Day 1 Activities
9:00am Keynote Address
Mr. Lance Spitzner: Honeynets and Digital Forensics (slides)
9:45am Briefing
Edward Balas, Indiana University: Honeynet Data Analysis: A technique for correlating sebek and network data (paper and slides)
10:20am Mid Morning Break
10:30am Briefings
  • Dr. Heather Dussault, SUNY Institute of Technology & GIIT, Rome, NY: Forensics, Fighter Pilots and the OODA Loop: The Role of Digital Forensics in Cyber Command and Control (paper and slides)
  • John Lowry, BBN Systems: Adversary Modeling to Develop Forensic Observables: (paper and slides)
  • Dr. Golden G. Richard III, University of New Orleans, New Orleans, LA: Breaking the Performance Wall: The Case for Distributed Digital Forensics (paper and slides)
12:15pm Lunch
1:15pm Panel Discussion
A panel of representatives from various domains address challenges to the adaptation of current digital forensic practice to the operational realm. What can be transitioned and used and what needs to be developed? Panel members from:
  • Corporate Forensics: Phil Turner
  • Military LE/Counter Intel: James Collins
  • Developers: Dr. Frank Adelstein, Jordan Jacobs
2:15pm Workgroup Assignments
Attendees assigned to groups, leaders, facilitators and recorders introduced, and meeting locations designated.
2:30pm Workgroup Breakouts
Groups will meet, debate, discuss and document details of their particular topic area. Refreshments Available.
4:30pm Workgroup Briefings
Group will brief their findings to the plenary session.
6:00pm End of Day
7:00pm DFRWS Dinner (Eat, drink and be responsible)
  • Forensic Feud: 2 Teams of forensic experts from the attendees ranks test their collective knowledge on a wide variety of questions form ALL forensic disciplines - Is your finger on the buzzer?
  • Forensic Rodeo: The evidence has been collected and you are the computer forensic examiner. Will you and your partners be the first to answer all the riddles completely? Will you find all the proof necessary to convict? Time will tell.
  • Award Ceremony: Yeah, we had fun but now someone's got to take something home.

Friday, August 13, 2004

7:30am Continental Breakfast
8:00am Day 3 Intro
Other Topics in Digital Forensics
8:00am NIST Hashapalooza
From 8:00am to 1:15pm, a separate track for the NIST Hashapalooza ran concurrently. Please visit their website for more information.
8:15am Briefings
  • Ian Bryant, National Infrastructure Security Coordination Centre, MOD/UK: Forensics for Critical Information Infrastructure Protection (slides)
  • Mike Sieffert, AFRL/ASU Assured Information Security: Stego Intrusion Detection System (paper and slides)
9:15am Mid Morning Break
9:25am Briefings
  • Paul Blythe and Jessica Fridrich, SUNY Binghamton, NY: Secure Digital Camera (paper   slides)
  • Mark Hirsh, DCCI - MITRE: Proposal to Formalize Test and Evaluation Activities Within the Forensic and Law Enforcement Communities (paper and slides)
  • Lorenzo Martignoni, Università degli Studi di Milano Bicocca, Italy: How to Reuse Knowledge about Forensic Investigations (paper and slides)
10:55am Brunch
11:15am Day 1 Synopsis: What have we accomplished and what are our plans related to Framework.
11:45am Day 2 Synopsis: What have we accomplished and what are our plans related to In-Time criteria
12:15pm DFRWS 2005 Planning: Discussion of next years location and possible interim meetings to discuss special topics and TEMS throughout the year.
1:15pm End of Workshop

©2001-2016 DFRWS   |   dfrws [at] dfrws [dot] org  

DFRWS is a US 501(c)(3) non-profit organization.