DFRWS Online

DFRWS 2005 Program and Proceedings

The DFRWS 2005 Agenda below summarizes the 2005 Workshop's program of discussion and research.

Tuesday, August 16, 2005
5:00pm	Registration and Welcome Reception Sponsored by Elsevier and The Journal of Digital Investigation
Wednesday, August 17, 2005
8:00am	Registration and Breakfast (provided)
9:15am	Opening Remarks
9:30am	Keynote Address Wietse Venema, IBM: Forensic Discovery (slides)
10:30am	Break
10:45am	SESSION 1: Data Hiding and Counter Forensics Chair: Golden G. Richard III Best Paper Award: Knut Eckstein (NC3A) and Marko Jahnke (FGAN/FKIE): Data Hiding in Journaling File Systems (paper | slides) (Best Paper Award) Matthew Geiger, Carnegie Mellon University: Evaluating Commercial Counter-Forensic Tools (paper | slides) Frank Adelstein (ATC-NY), Yun Gao and Golden G. Richard III (University of New Orleans): Automatically Creating Realistic Targets for Digital Forensics Investigation (paper | slides)
12:15pm	Breakout Lunch
2:00pm	SESSION 2: Research Needs of Law Enforcement Chair: Eoghan Casey Panel: Detective Marc Ortiz (Kenner Police Department), Todd Shipley (SEARCH) and Philip Turner (QinetiQ)
3:15pm	Break
3:30pm	SESSION 3: Scalability and Automation Chair: Daryl Pfief Brian D. Carrier and Eugene H. Spafford (Purdue University): Automated Digital Evidence Target Definition Using Outlier Analysis and Existing Evidence (paper | slides) A. Chris Bogen (United States Army Corps of Engineers) and Dr. David A. Dampier (Mississippi State University): Preparing for Large-Scale Investigations with Case Domain Modeling (paper | slides)
4:30pm	Presentation of DFRWS 2005 Forensics Challenge Results Lead: Eoghan Casey
Thursday, August 18, 2005
9:00am	Breakfast (provided)
9:30am	SESSION 4: Network and File System Analysis Chair: Vassil Roussev Wm. Blair Gillam and Marc Rogers (Purdue University): File Hound: A Forensics Tool for First Responders (paper | slides) Christian G. Sarmoria, Steve J. Chapin (Syracuse University): Monitoring Access to Shared Memory-Mapped Files (paper | slides) Wei Wang and Thomas E. Daniels (Iowa State University): Network Forensics Analysis with Evidence Graphs (paper)
11:00am	Break
11:15am	SESSION 5: Legal and Certification Issues Chairs: Michael Losavio and Marcus Rogers Panel: Mohamed Battisha, Mark Wettle, Esq. and Joseph K. West, Esq (Entergy Corporation)
12:15pm	Breakout Lunch
2:00pm	SESSION 6: Digital Forensics Tools Chair: Brian Carrier Florian Buchholz and Courtney Falk (Purdue University): Design and Implementation of Zeitline: a Forensic Timeline Editor (paper | slides) Philip Turner, QinetiQ: Unification of Digital Evidence from Disparate Sources (Digital Evidence Bags) (paper | slides) Golden G. Richard III and Vassil Roussev (University of New Orleans): Scalpel: A Frugal, High Performance File Carver (paper)
3:30pm	Break
3:45pm	Organization and Documentation of Breakout Lunch Topics
4:15pm	Presentation and Discussion of Breakout Lunch Topics With Group Leaders
5:00pm	Demonstrations of Research Projects and Tools Sudhir Aggarwal, FSU: Anti-cyberstalking: the Predator and Prey Alert System Eoghan Casey (Stroz Friedberg) and Steve Mead (NIST): File Fragment Scanning John Ward, I.D.E.A.L. Technology Corporation: STRIKE! Real-Time Extraction of Actionable Intelligence
7:00pm	DFRWS 2005 Banquet Digital Forensics Rodeo and Jeopardy Presentation of Best Paper Award Elsevier's Digital Investigation Awards
Friday, August 19, 2005
9:00am	Breakfast (provided)
9:30am	SESSION 8: Collection and Processing of Digital Evidence Chair: Eoghan Casey Lei Pan and Lynn M. Batten (Deakin University, Australia): Reproducibility of Digital Evidence in Forensic Investigations (paper | slides) Erin E. Kenneally (San Diego Supercomputer Center) and Christopher L. T. Brown (Technology Pathways, LLC): Risk Sensitive Digital Evidence Collection (paper | slides)
11:00	Break
11:15am	Works in Progress Chair: Daryl Pfeif Short Presentations (10 minutes each)
12:30pm	Closing Remarks & Participant Feedback Lunch & DFRWS 2006 Planning Session open to all participants at La Louisiane

Breakout Lunches

To encourage discussion and collaboration among participants, DFRWS is organizing breakout lunches. The lunches will be organized by DFRWS, but are not included in the registration cost. Each day, you will have several restaurants to choose from and each will have a theme or interest area, such as legal topics, practitioner topics, tool building, live forensics, distributed processing, etc. Each restaurant will be within a 5-10 minute walk from the hotel, and a sample menu will be available. Signup sheets will be available each morning.

Short Presentations / Works in Progress

The Short Presentations / Works in Progress session is a forum open to anyone interested in presenting topics that would not merit a full time slot, perhaps because it is on-going work or it is at an early idea stage. The only limitations are on the time and number of slides, specifically 10 minutes and 3 slides. Participants can use this time as a sounding board to judge the interest of other researchers or practitioners. Presentation slots will be allocated on a strictly first come, first serve basis. Talk to Daryl Pfeif anytime during the workshop to sign up for a slot; she will be managing the schedule.