Please note: All times below are in British Summer Time. Current BST Time:


Wednesday, June 3, 2020

TimingsMain Webinar Room
14:00 to 14:15Welcome Address
14:15 to 15:00Paper Session I - Memory Forensics
Chair: Harald Baier
BMCLeech: Introducing Stealthy Memory Forensics to BMC
Tobias Latzo, Julian Brost and Felix Freiling

Download Paper | Slides
Tampering Digital Evidence is Hard: The Case of Main Memory Images
Janine Schneider, Julian Wolf and Felix Freiling

Download Paper | Slides
On Challenges in Verifying Trusted Executable Files in Memory Forensics
Daniel Uroz and Ricardo J. Rodríguez

Download Paper | Slides
15:00 to 15:45Paper Session II - Digital Forensic Science
Chair: Hans Henseler
Towards Sound Forensic Arguments: Structured Argumentation Applied to Digital Forensics Practice
Virginia N. L. Franqueira and Graeme Horsman

Download Paper | Slides
An Argumentation-Based Reasoner to Assist Digital Investigation and Attribution of Cyber-Attacks
Erisa Karafili, Linna Wang and Emil Lupu

Download Paper | Slides
Structuring the Evaluation of Location-Related Mobile Device Evidence
Eoghan Casey, David-Olivier Jaquet-Chiffelle, Hannes Spichiger, Elénore Ryser and Thomas Souvignet

Download Paper | Slides
15:45 to 16:00Break
16:00 to 16:30Presentation Session I
Chair: Frank Adelstein
Digital Forensic Techniques for Preservation and Archiving
Neil Jefferies

Automated Normalisation and correlation of mobile device extractions using CASE
Eoghan Casey, Quentin Rossy and Martina Reif

Relevance scoring and clustering of digital traces
Ameya Puranik

16:30 to 17:15Paper Session III - Artificial Intelligence Aided Investigation
Chair: Jan-Niclas Hilgert
DeepUAge: Improving Underage Age Estimation Accuracy to Aid CSEM Investigation
Felix Anda, Nhien An Le Khac and Mark Scanlon

Download Paper | Slides
Cutting through the Emissions: Feature Selection from Electromagnetic Side-Channel Data for Activity Detection
Asanka Sayakkara, Luis Miralles, Nhien An Le Khac and Mark Scanlon

Download Paper | Slides
Towards Open-Set Forensic Source Grouping on JPEG Header Information
Patrick Mullan, Christian Riess and Felix Freiling

Download Paper | Slides
17:15 to 17:30Lightning Talks Session I
Chair: Daryl Pfeif
17:30 to 18:30Posters and Free Time
18:30 to ??Digital Forensic Rodeo

Thursday, June 4, 2020

TimingsMain Conference Room
14:00 to 14:30Presentation Session II
Chair: Jessica Hyde
Forensics analysis of Apple Homepod
Mattia Epifani
Expressing evaluative conclusions in cases involving tampering of digital evidence
Timothy Bollé, Francesco Servida, Johann Polewczyk, Thomas Souvignet and Eoghan Casey

14:30 to 15:15Paper Session IV - Network Investigations
Chair: John Sheppard
A Scalable Platform for Enabling the Forensic Investigation of Exploited IoT Devices and their Generated Unsolicited Activities
Sadegh Torabi, Elias Bou-Harb, Chadi Assi and Mourad Debbabi

Download Paper | Slides
IoT Botnet Forensics: A Comprehensive Digital Forensic Case Study on Mirai Botnet Servers
Xiaolu Zhang, Oren Upton, Nicole Beebe and Kim-Kwang Raymond Choo

Download Paper | Slides
IP addresses in the context of digital evidence in the criminal and civil case law of the Slovak Republic
Pavol Sokol, Laura Rózenfeldová, Katarína Lučivjanská and Jakub Harašta

Download Paper | Slides
15:15 to 15:30Break
15:30 to 16:15Keynote Address: Gill Tully, UK Forensic Science Regulator
Risk, Quality Assurance and Innovation in Digital Forensics
A recap of digital forensics over the last 20 years, highlighting the rapid growth of digital forensics, the growth of data and the associated rapid challenges in digital forensics in an ever increasing digital world.
16:15 to 16:45Paper Session V - Filesystem Forensics
Chair: Mark Scanlon
Forensic Analysis of the Resilient File System (ReFS) Version 3.4
Paul Prade, Tobias Groß and Andreas Dewald

Download Paper | Slides
Artifacts for detecting timestamp manipulation in NTFS and their reliability
David Palmbach and Frank Breitinger

Download Paper | Slides
16:45 to 17:15Lightning Talks
Chair: Daryl Pfeif
17:15 to 18:00Birds of a Feather Session
Chair: Frank Adelstein
18:00 to 18:30Break
18:30 to 21:30Pub Quiz (and Announcement of Best Paper Awards)
Chair: Chris Hargreaves

Friday, June 5, 2020

Workshop Room 1Workshop Room 2
13:30 to 14:30Insights from Waves: Gathering Forensically-useful Insights from IoT Devices with
Electromagnetic Side-Channel Analysis (Part I)

Presenters: Asanka Sayakkara, Nhien-An Le-Khac, Mark Scanlon (University College Dublin)
Dynamic Instrumentation for forensic research using Frida (Part I)

Presenter: Or Begam (Cellebrite)
14:30 to 14:45Break
14:45 to 16:00Insights from Waves: Gathering Forensically-useful Insights from IoT Devices with Electromagnetic Side-Channel Analysis (Part II)Dynamic Instrumentation for forensic research using Frida (Part II)
16:00 to 16:15Break
16:15 to 17:15Making the CASE for Cyber-investigation Interoperability (Part I)

Presenters: Eoghan Casey, Harm van Beek, Jessica Hyde, Cory Hall, Vik Harichandran, John Andrew Sovern, Mattia Epifani, Claudia Meda, Fabrizio Turchi, Ryan Griffith, Deborah L. Nichols
17:15 to 17:30Break
17:30 to 18:45Making the CASE for Cyber-investigation Interoperability (Part II)