| Paper | Presentation | Conference | Downloads | Author |
|---|
| Privacy-Preserving Network Flow Recording | DFRWS USA 2011 |
| Bilal Shebaro, Jedidiah Crandall (University of New Mexico) |
| Reconstructing Corrupt DEFLATEd Files | DFRWS USA 2011 |
| Ralf Brown (CMU) |
| System for the Proactive, Continuous, and Efficient Collection of Digital Forensic Evidence | DFRWS USA 2011 |
| Clay Shields (Georgetown University), Ophir Frieder, Mark Maloof |
| Advanced Evidence Collection and Analysis of Web Browser Activity | DFRWS USA 2011 |
| Junghoon Oh, Seungbong Lee, and Sangjin Lee |
| Augmenting Password Recovery with Online Profiling | DFRWS USA 2011 |
| Khawla Al-Wehaibi, Tim Storer, and Brad Glisson |
| Forensic Carving of Network Packets and Associated Data Structures | DFRWS USA 2011 |
| Robert Beverly, Ph.D. (Naval Postgraduate School), Simson Garfinkel, Ph.D. (Naval Postgraduate School), and Greg Cardwell |
| Towards a General Collection Methodology for Android Devices | DFRWS USA 2011 |
| Chengye Zhang and Nicolas Christin |
| Visualization in Testing a Volatile Memory Forensic Tool | DFRWS USA 2011 |
| Hajime Inoue, Frank Adelstein, Ph.D. (ATC-NY Corp), Robert Joyce |
| Android Anti-Forensics Through a Local Paradigm | DFRWS USA 2010 |
| Alessandro Distefano, Gianluigi Me, Francesco Pace |
| Automated Mapping of Large Binary Objects Using Primitive Fragment Type Classification | DFRWS USA 2010 |
| Gregory Conti, Sergey Bratus, Benjamin Sangster, Roy Ragsdale, Matthew Supan, Andrew Lichtenberg, Robert Perez-Alemany, Anna Shubina |
| Different Interpretations of ISO9660 File Systems | DFRWS USA 2010 |
| Brian Carrier (Honorary Board Member) , Ph.D. (Basis Technology) |
| Dynamic Recreation of Kernel Data Structures for Live Forensics | DFRWS USA 2010 |
| Golden Richard III, Ph.D. (Louisiana State University), Andrew Case (Volexity), Lodovico Marziale (BlackBag Technologies) |
| Forensic Investigation of Peer-to-Peer File Sharing Network | DFRWS USA 2010 |
| Robert Erdely, Thomas Kerle, Brian Levine (University of Massachusetts Amherst), Marc Liberatore (University of Massachusetts Amherst), Clay Shields (Georgetown University) |
| Hash Based Disk Imaging Using AFF4 | DFRWS USA 2010 |
| Michael Cohen (Google), Bradley Schatz, Ph.D. (Schatz Forensic) |
| If Error Rate is Such a Simple Concept, Why Don’t I have One for My Forensic Tool Yet | DFRWS USA 2010 |
| James Lyle |
| Leaving Timing Channel Fingerprints in Hidden Service Log Files | DFRWS USA 2010 |
| Bilal Shebaro, Fernando Perez-Gonzalez (Universidad de Vigo), Jedidiah Crandall (University of New Mexico) |
| The Normalized Compression Distance as a File Fragment Classifier | DFRWS USA 2010 |
| Stefan Axelsson (Norwegian University of Science and Technology) |
| Treasure and Tragedy in kmem_cache Mining for Live Forensics Investigation | DFRWS USA 2010 |
| Golden Richard III, Ph.D. (Louisiana State University), Andrew Case (Volexity), Lodovico Marziale (BlackBag Technologies), Cris Neckar |
| Digital Forensics Research – The Next 10 Years | DFRWS USA 2010 |
| Simson Garfinkel, Ph.D. (Naval Postgraduate School) |
| Extracting Windows Command Line Details from Physical Memory | DFRWS USA 2010 |
| Richard Stevens and Eoghan Casey, Ph.D. (cmdLabs) |
| Live Memory Forensics of Mobile Phones | DFRWS USA 2010 |
| Vrizlynn L. L. Thing, Kian-Yong Ng, AND Ee-Chien Chang |
| Secure USB Bypassing Tool | DFRWS USA 2010 |
| Jewan Bang, Byeongyeong Yoo, and Sangjin Lee |
| Using Purpose-Built Functions And Block Hashes To Enable Small Block And Sub-File Forensics | DFRWS USA 2010 |
| Simson Garfinkel, Ph.D. (Naval Postgraduate School), Alex Nelson, Ph.D. (Naval Postgraduate School), Douglas White (NIST), and Vassil Roussev, Ph.D. (University of New Orleans) |
| Windows Operating System Agnostic Memory Analysis | DFRWS USA 2010 |
| James Okolica and Gilbert Peterson (US Air Force Institute of Technology) |
| Bringing Science to Digital Forensics with Standardized Forensic Corpora | DFRWS USA 2009 |
| Simson Garfinkel, Ph.D. (U.S. Census Bureau), Paul Farrell, Vassil Roussev, Ph.D. (University of New Orleans), George Dinolt |
| Computer Forensic Timeline Visualization Tool | DFRWS USA 2009 |
| Jens Olsson, Martin Boldt |
| DEX – Digital Evidence Provenance Supporting Reproducibility and Comparison | DFRWS USA 2009 |
| Brian Levine (University of Massachusetts Amherst), Marc Liberatore (University of Massachusetts Amherst) |
| DIALOG – A Framework for Modeling, Analysis and Reuse of Digital Forensic Knowledge | DFRWS USA 2009 |
| Damir Kahvedzic, Tahar Kechadi |
| Extending the Advanced Forensic Format to accommodate Multiple Data Sources, Logical Evidence, Arbitrary Information and Forensic Workflow | DFRWS USA 2009 |
| Michael Cohen (Google), Simson Garfinkel, Ph.D. (U.S. Census Bureau), Bradley Schatz, Ph.D. (Schatz Forensic) |
| Identification and Recovery of JPEG Files with Missing Fragments | DFRWS USA 2009 |
| Husrev Sencar, Nasir Memon (NYU Tandon School of Engineering) |