Date and Time:
Tuesday, March 21, 09:00 – 13:00

Workshop organiser:

Description:
Globally, there is an increase in the use of systems outside of the traditional trust barrier of corporate control, with many industries having a more perimeter-less design. Since the Covid-19 global pandemic this has increased exponentially, with a rise in home office and the need for systems and devices that can be used at home through remote monitoring. The use of medical systems and devices has been revolutionised by the freedom to allow patients to be monitored in-house or remotely, lessening the burden on physical resources and the need for physical attendance at clinics and hospitals. Medical devices, at home and in health authorities, record patient information and are used for maintaining the life and the health of patients. These same medical devices may now reside outside of the full control of the health authorities, making them more susceptible to exploitation by bad actors, but with the potential to become a rich source of information during an investigation. Such devices may not yet be identified due to a lack of awareness of their abilities, but over time an increased number of medical devices will be used in investigations. From a forensic perspective, the sheer quantity and variety of devices provides a range of opportunities and challenges, with data artefacts often stored in unusual, or proprietary formats which require processing before they become usable, or unfamiliar data connections and systems increasing the challenge to extract any data.

These are not unfamiliar challenges for any digital forensic investigator, and as with any new technology it is often the case that traditional digital forensic skillsets, and tools, can be directly translated and utilized. This workshop explores the translation of traditional skillsets, and processes, into the relatively new field of medical and healthcare device forensics. Practical analysis of case studies will allow participants to explore the forensic value of various medical devices that exist in both home and hospital settings. Upon completion of the workshop participants will:

1. Understand the relevance of medical device forensics.
2. Develop knowledge in transferring tradition digital forensic skills to medical devices.
3. Understand acquisition approaches and limitations.
4. Explore examination strategies.
5. Process medical data into usable data.
6. Understand the validity of evidence from medical devices.

Who should attend:
• Both new and experienced digital forensic practitioners.
• Providers in the healthcare or medical space.
• Medical personnel that are curious about the topic.
• Law enforcement.

Workshop Preparation:
In preparation for the workshop, we ask you to please make sure that you have installed the software called Virt-Viewer(https://virt-manager.org/download.html). This is a tool for displaying a graphical console that is linked to Noroff University Virtualised Learning Environment that will be used for this workshop. Please make sure that you have administrator privileges to ensure that this works. Virt-Reviewer runs on different operating systems. It needs to be noted that it can be particularly temperamental on Apple based operating systems. Everything you need for the workshop will be run from the VLE system.