We invite contributions in five categories: research papers, presentation proposals, panel proposals, tutorial/workshop proposals, and demo proposals.

RESEARCH PAPERS are evaluated through a double-blind, peer-reviewing process, and accepted research papers will be published in printed proceedings by Elsevier.

PRESENTATIONS are opportunities for industry researchers and practitioners who do not have the time to write a paper, but who have forensics information and experiences that would be of interest to DFRWS attendees. Presentation proposals undergo a light reviewing process to filter out sales pitches and ensure the topic is relevant to our audience.

TUTORIALS and WORKSHOPS allow for an in-depth, detailed presentation of tools and techniques of interest to DFRWS attendees and they can cover state-of-the-art research projects, useful tips and techniques for standard tools, or most anything that DFRWS attendees would consider beneficial. While commercial tools can be used, these workshops or tutorials should NOT be thinly-veiled commercial advertisements.

We strongly encourage workshop/tutorial authors to include activities that require active participation by attendees (e.g., a sample forensic analysis on their own laptops using a particular tool or set of tools).

DFRWS will provide one free conference registration for each tutorial and workshop accepted.

Topics of Interest

  • Memory analysis and snapshot acquisition
  • Storage forensics, including file system and Flash
  • "Big data" approaches to forensic, including collection, data mining, and large scale visualization
  • Incident response and live analysis
  • Virtualized environment forensics, with specific attention to the cloud and virtual machine introspection
  • Malware and targeted attacks: analysis, attribution
  • Network and distributed system forensics
  • Event reconstruction methods and tools
  • Mobile and embedded device forensics
  • Digital evidence storage and preservation
  • Data recovery and reconstruction
  • Multimedia analysis
  • Database forensics
  • Tool testing and development
  • Digital evidence and the law
  • Case studies and trend reports
  • Data hiding and discovery
  • Anti-forensics and anti-anti-forensics
  • Interpersonal communications and social network analysis
  • Non-traditional forensic scenarios and approaches (e.g. vehicles, control systems, and SCADA)

The above list is only suggestive. We welcome new, original ideas from people in academia, industry, government, and law enforcement who are interested in sharing their results, knowledge, and experience. Authors are encouraged to demonstrate the applicability of their work to practical issues. Questions about submission topics can be sent via email to: eu-papers (at) dfrws (dot) org

Submissions

  • RESEARCH PAPERS: Research papers must be original contributions, not duplicate previous work (including the authors' own), and must not be under simultaneous publication review elsewhere. The review process will be "double-blind" (reviewers will not know who the authors are, and authors will not know who the reviewers are). Therefore, the version submitted for review should not contain the names or affiliations of the authors. When referring to their own previous work, authors should use the third person instead of the first person (i.e. "Smith and Jones [2] previously determined..." instead of "We [2] previously determined..."). 
    Papers must be written in English and should not exceed 10 single-spaced, two-column pages with 1 inch margins and 10pt font. Papers should be submitted as PDF files. Accepted papers will be required to utilize the provided Microsoft Word template or Elsevier's LaTeX template (elsarticle class with the "5p" option). Authors are encouraged to use these templates for the submission version as well. After using the templates, do not forget to remove authors' names and other revealing information for double-blind submission. 
    Authors are expected to present their work in person at the conference. At least one registration per paper is required in order to be included in the proceedings. Authors shall register for the conference prior to submitting their final draft for publication. At the conference, authors of accepted papers will be given 25 minutes to present their work, followed by 5 minutes of questions. 
    Research papers must be submitted through the EasyChair site. Submissions must be in Adobe Acrobat PDF format. Send any questions about research paper / presentation proposal submissions to eu-papers (at) dfrws (dot) org 
  • PANEL PROPOSALS: These should be one to three pages and clearly describe the topic, its relevance, and a list of potential panelists and their biographies. Panels will be evaluated based on the topic relevance and diversity of the panelists. Panel proposals must be emailed to eu-panels (at) dfrws (dot) org in PDF or plain text format. 
  • PRESENTATIONS (NEW): This year DFRWS is soliciting proposals for 15-minute presentations that showcase forensics experiences of interest to DFRWS attendees, including (but not limited to) case studies and advances in user interface, real-time analysis, and triage. Presentation proposals are not included in the printed proceedings and should not be anonymized. Presentation proposals only undergo a light reviewing process to make sure they are of interest to the community. Sales pitches will not be accepted. Presentation proposals are in the form of an abstract (150-300 words) in PDF format. At least one author is expected to register and present their work in person at the conference. Presenters will be given 15 minutes, followed by 5 minutes of questions. Presentation duration will be strictly enforced. 
    Presentation proposals must be submitted through the EasyChair site. Submissions must be in Adobe Acrobat PDF format. Send any questions about research paper / presentation proposal submissions to eu-papers (at) dfrws (dot) org.
  • DEMO OR POSTER PROPOSALS: DFRWS welcomes demonstrations or posters of proof of concept and research-based tools. Proposals should describe the tool, its relevance to the forensics field, and space/equipment needs (e.g., table size, power, networking, etc.). 
    Demo or poster proposals must be emailed to eu-demos (at) dfrws (dot) org in PDF or plain text format. 
  • LIGHTNING TALKS: Conference attendees are invited to present parts of their ongoing work or open research questions for 5 minutes. Registration for lightning talks is possible at the conference. 

In addition to the above, the conference features a work-in-progress session where any conference attendant can present their ongoing work for 5 minutes.

 

DFRWS EU 2016 Call for Tutorial and Workshop Proposals

DFRWS EU offers an opportunity to present vendor-agnostic workshops and tutorial sessions. Tutorials and workshops allow for an in-depth, detailed presentation of tools and techniques of interest to DFRWS attendees and they can cover state-of-the-art research projects, useful tips and techniques for standard tools, or most anything that DFRWS EU attendees would consider beneficial.

While commercial tools can be used, these sessions should NOT be thinly-veiled commercial advertisements.

DFRWS will provide one free registration to the presenter(s) for each tutorial and workshop accepted.

Topics of Interest

Topics include the normal DFRWS EU topics of interest (as listed in the CFP), but deeper, practical aspects of digital forensics are particularly attractive. This includes how to use particular digital forensic tools, what evidence is available on devices, how to acquire or process such evidence, and more.

Important Dates

All important dates can be found in the Deadlines section.

Submission Requirements

Proposals for tutorials and workshops should be under five pages and include the following details:

  • Description of the topic, clearly indicating if the workshop is a lecture or is interactive/hands-on (1-2 paragraphs)
  • Intended audience and level of technical knowledge assume
  • A description of materials to be provided to participants (software, handouts, etc.)
  • DFRWS hardware requirements (projector, screen, wireless network, etc.)
  • Participant requirements (personal laptop, OS, software, etc.)
  • Time required (preferably a two- or four-hour block)
  • A short “blurb” for the website including your desired name, title, and affiliation (see last year's as a reference)
  • Outline of the talk/activities and the time breakdown, at 15-minute resolution

We strongly encourage workshop/tutorial authors to include activities that require active participation by attendees (e.g., a sample forensic analysis on their own laptops using a particular tool or set of tools). 
All proposals will be evaluated and notifications sent at the same time DFRWS paper notifications are sent. 
For accepted proposals, a draft of the presentation slides is due approximately two months before the conference. These slides will be reviewed by the workshop chairs. Subsequently, presenters must submit a final copy of their slides FOUR WEEKS BEFORE DFRWS. Please see the important dates section below for exact dates.

Proposals for tutorials and pre-conference workshops must be emailed to eu-workshops (at) dfrws (dot) org in PDF or plain text format.

Student Scholarship Program

A limited number of scholarships may be awarded to students presenting a paper at the conference. The intent is to help alleviate the financial burden due to the cost of hotel expenses and conference registration. See the DFRWS homepage for more information.