DFRWS 2014 EU Agenda

The DFRWS 2014 EU Agenda below summarizes the program of discussion and research. This years conference is held in cooperation with the Association for Computing Machinery (ACM) and its Special Interest Group on Security, Audit and Control (SIGSAC). .

DFRWS-EU Google Calendar

Tuesday, May 6, 2014

16:00 Pre-registration opens (Pakhuis de Zwijger)
18:00 Pre-registration closes

Wednesday, May 7, 2014

08:00 Registration / Breakfast
09:00 Opening Remarks - Eoghan Casey
09:10 Keynote Address
Peter Zinn (Senior Cybercrime Advisor for the Dutch National High Tech Crime Unit)
Police, cyber and forensics
10:10 Break (Coffee and Tea)
10:30 SESSION 1: General data analytics
Chair: Hans Henseler
  • "Robust Linux Memory Acquisition with Minimal Target Impact" Johannes Stuettgen and Michael Cohen ( paper | pres )
    Best paper
  • "Practical Use of Approximate Hash Based Matching in Digital Investigations" Petter Christian Bjelland, André Årnes and Katrin Franke ( paper | pres )
  • "Fast Indexing Strategies for Robust Image Hashes" Christian Winter and York Yannikos ( paper | pres )
12:00 Lunch on your own
14:00 SESSION 2: Processes and Services
Chair: Zeno Geradts
  • "Automated evaluation of approximate matching algorithms on real data" Frank Breitinger and Vassil Roussev ( paper | pres )
  • "Information Assurance in a distributed forensic cluster" Nicholas Pringle and Mikhaila Burgess ( paper | pres | pres-pptx )
  • "OpenLV: Empowering Investigators and First-Responders in the Digital Forensics Process" Timothy Vidas, Brian Kaplan and Matthew Geiger ( paper | pres )
  • "Digital Forensics as a Service: a Game Changer" Ruud van Baar, Harm van Beek and Erwin van Eijk ( paper | pres )
16:00 Break (Coffee and Tea)
16:30 Panel Discussion
Title: Reducing Backlogs in Digital Forensics Labs
Moderator: Hans Henseler
  • Adrie Stander, University of Cape Town
  • Ruud van Baar, NFI
  • Nina van der Knaap, Leiden University
  • Eoghan Casey, MITRE
17:30 Five-Minute Teasers for Tool Demos and poster session
18:00 Welcome reception/drinks at the conference venue including poster and demo session
  Dinner on your own

Thursday, May 8, 2014

07:30 Registration / Breakfast
08:20 Administrative Remarks
08:30 Keynote Address
Christiaan Alberdingk Thijm (Dutch lawyer from bureau Brandeis, experiences include the Kazaa case and other complex digital cases)
The importance of fact-finding in technology cases
09:30 Invited Speaker
Mikael Lindström (European Cyber Crime Center, EC3)
Title: EC3 - European Cyber Crime Centre - fighting crime from the international perspective
10:10 Break (Coffee and Tea)
10:30 SESSION 3: Technology-specifc analysis
Chair: Pavel Gladyshev
  • "Key-hiding on the ARM platform" Alexander Nilsson, Marcus Andersson and Stefan Axelsson ( paper | pres )
  • "Forensic Analysis of Video File Formats" Thomas Gloe, André Fischer and Matthias Kirchner ( paper | pres )
  • "BitTorrent Sync: First Impressions and Digital Forensic Implications" Jason Farina, Mark Scanlon and Tahar Kechadi ( paper | pres )
  • "Windows Surface RT Tablet Forensics" Asif Iqbal, Hanan Alobaidli, Andrew Marrington and Andy Jones ( paper | pres )
12:30 Lunch on your own
14:30 SESSION 4: Memory analysis
Chair: Tim Vidas
  • "OBA2: An Onion Approach to Binary Code Authorship Attribution" Saed Alrabaee, Mourad Debbabi and Lingyu Wang ( paper | pres )
  • "Out of sight, but not out of mind:Traces of nearby devices' wireless transmissions in volatile memory" Wicher Minnaard ( paper | pres )
  • "On the database lookup problem of approximate matching" Frank Breitinger, Harald Baier and Douglas White ( paper | pres )
16:00 Break (Coffee and Tea)
16:30 Short Presentations & Works in Progress (Lightning Talks, 5 minutes each)
17:00 Panel Discussion
Title: Preservation of Provenance in the Cloud
Moderator: Luciana Duranti
18:00 Start of social program, including main banquet, forensic rodeo, and other activities
  • Best Paper Award

Friday, May 9, 2014

07:30 Registration / Breakfast
 Workshop Track 1Workshop Track 2
08:00 GRR Incident Response Framework
Michael Cohen & Andreas Moser
Video File Recovery using Defraser
09:45 Break (Coffee and Tea
10:00 GRR Incident Response Framework (continued) Real Network Forensics KungFu
Kelvin Wong, Alan Ho, & Anthony Lai
11:30 Lunch on your own
12:30 Memory forensic analysis workshop
Michael Cohen & Johannes Stuettgen
OpenStack Cloud Forensics
Lee Tobin, Paulo Roberto Nunes de Souza, Afrah Almansoori, Pavel Gladyshev, & Babak Habibnia
15:45 Organized group tour of the digital forensic lab of the Netherlands Forensic Institute in The Hague (bus) - coordinated by Ronald Van der Knijff
18:30 Dinner & DFRWS EU 2015 / 2016 Planning Session
Location: The Hague (return to Amsterdam by train, ticket cost ~ 15 Euro)
Dinner and train cost not covered by conference

©2001-2016 DFRWS   |   dfrws [at] dfrws [dot] org  

DFRWS is a US 501(c)(3) non-profit organization.