The Astor Crowne Plaza Hotel in the French Quarter of New Orleans, Louisiana was home to the fifth annual DFRWS on August 17-19, 2005. The workshop focused on digital evidence (DE) concealment and analysis techniques, DE scalability and automation, digital forensic tools and, DE legal issues.

The Best Paper Award went to “Data Hiding in Journaling File Systems” by Knut Eckstein (NC3A) and Marko Jahnke (FGAN/FKIE).

MEMORY ANALYSIS was one of the primary themes of DFRWS 2005. In an effort to motivate discourse, research and tool development in this area, the Organizing Committee created the intrusion/intellectual property theft scenario detailed below. This memory challenge was open to all, and team efforts were encouraged. An award was given to the people who extracted the most information from the memory dumps, and the quality of documentation and novelty of techniques were considered when choosing the winners. Network traffic associated with this intrusion was made available during the workshop.

Chris Betz: Developed memparser to reconstruct process list and extract information from process memory.
George M. Garner Jr. & Robert-Jan Mora: Developed kntlist to interpret structures in memory and maintain an audit log and integrity checks.

Conference Location:

Astor Crowne Plaza Hotel New Orleans, LA United States

August 15, 2005 to August 17, 2005


Forensic Discovery

Wietse Venema | IBM



Organizing Committee

Frank Adelstein


Brian Carrier

Purdue University

Eoghan Casey

Digital Evidence

Dan Kalil

Air Force Research Lab, Assured Information Security

Chet Maciag

Air Force Research Lab

Gary Palmer

The MITRE Corporation

Daryl Pfeif

Digital Forensics Solutions

Golden G. Richard, III

University of New Orleans

Vassil Roussev

University of New Orleans

Technical Program Committee

Tom Bacon

Southern Oregon University

David Baker

The MITRE Corporation

Nicole Beebe

University of Texas at San Antonio

R. Chandramouli

Stevens Institute of Technology

Phil Craiger

University of Central Florida/National Center for Forensic Science

Dave Dittrich

University of Washington

Heather Dussault


Dario Forte

University of Milano, Italy

Yun Gao

University of New Orleans

Warren Harrison

Portland State University

Chet Hosmer

Wetstone Technology

Erin Keanneally

San Diego Supercomputer Center

Jesse Kornblum

ManTech CFIA

Michael Losavio

University of Louisville

James Lyle


Nasir Memon

Polytechnic University

Srinivas Mukkamala

New Mexico Tech

Gilbert Peterson

Air Force Institute of Technology

Marc Rogers

Purdue University

Kulesh Shanmugasundaram

Polytechnic University

Todd Shippley


Peter Sommer

London School of Economics, UK

Chris Stippich

Digital Intelligence, Inc

Steve Romig

The Ohio State University

K.P. Subbalakshmi

Stevens Institute of Technology

Olivier DeVel

Defense Sci. and Tech. Organisation (DSTO), Australia

Duminda Wijesekera

George Mason University


Sponsors help DFRWS to produce quality events and foster community. Click a logo to learn more about the sponsor.

Information about sponsorship opportunities is available at:

Digital Investigations Journal

Digital Investigation covers a broad array of subjects related to crime and security throughout the computerized world. The primary pillar of this publication is digital evidence, with the core qualities of provenance, integrity and authenticity.

Learn More


Elsevier is a global information analytics business that helps institutions and professionals progress science, advance healthcare and improve performance.

Learn More

Air Force Research Laboratory

The Air Force Research Laboratory is a scientific research organization operated by the United States Air Force Materiel Command dedicated to leading the discovery, development

Learn More