Overview | Results
A PDF version of the challenge overview is available here.
Submission deadline: Jun 30, 2012
The overall goal of this challenge is to raise the state of the art in digital forensic practice by providing an open public venue for a best-of-breed competition. We challenge competitors to develop the fastest and most accurate data block classifier.
Scoring will be based on the weighted scores of three criteria:
$ <tool_name> <target> <block_size> [<concurrency_factor>]
Example output: > data_sniffer target 512 0 jpg JPEG data 512 jpg xml XML inside a JPEG (presence of JPEG data is implied) 1024 jpg jpg JPEG inside another JPEG (thumbnail) 1536 pdf jpg zlib JPEG & deflate-compressed data as part of a PDF document 2048 html js JavaScript inside html 2550 zlib-xml Zlib-compressed xml 3092 pdf base85-jpg PDF document with base85-encoded JPEG 3604 null Unknown/unable to classify
The following is a list of the expected output data types and their respective interpretation. A tool's ability to handle additional common data types would be used to help decide a tie or near-tie.
Clarifications (in response to questions submitted):
Most test data will be obtained from public Internet sources. We expect that text content will be in English, however, no special filter will be applied. If you wish to obtain test data for development and tool testing, you may consider the data sets at http://digitalcorpora.org and http://www.cfreds.nist.gov, among other publically available.
All participants must send an email to challenge2012(at)dfrws
The actual solution (code and relevant documentation) can be submitted in one of three ways:
Ideally, submissions should be self-contained; however, if bundling of third-party code is not possible (e.g., due to licensing restrictions) appropriate instructions on building the tool should be included.
As stated above, this competition is for open-source tools and, in the interest of open competition, DFRWS may publish the actual submissions along with test results. Beyond that, DFRWS will make no further attempts to distribute the solutions.
Although we strongly encourage toolmakers to cover as wide a range of data types as possible, all submissions will be given a fair chance, even if they do not cover all targeted data types.
First prize: DFRWS will provide free conference registration to our 2012 conference for up to two members of the winning team.
Grand prize: DFRWS seeks to award an additional $1,000 cash prize to the winners, if their solution exhibits all the attributes of a field-ready tool with the necessary robustness and performance.
The decision on prizes will be made by the DFRWS Organizing Committee based on the tool testing results conducted by the challenge team consisting of the following OC members: Vassil Roussev, Wietse Venema, and Eoghan Casey.
Send all questions to challenge2012(at)dfrws
©2001-2016 DFRWS | dfrws [at] dfrws [dot] org
DFRWS is a US 501(c)(3) non-profit organization.