Please note: All times below are in Eastern Daylight Savings Time. For clarity, the current time in Baltimore, MD is:
Schedule of Events
| TIMES ARE IN EASTERN | ||
|---|---|---|
| Sunday, July 9 | ||
| 800 | Registration opens | |
| Parallel session | ||
| 845 | Ransomware Simulations: Hands-on Case Studies by Ali Hadi and Mariam Khader (Champlain College) | Providing digital forensics as a service with code notebooks by Harm Van Beek (Netherlands Forensic Institute) and Quintin Walters (MITRE) |
| 1300 | Lunch | |
| 1400 | Learning Linux Forensic Analysis and Why it Matters by Ali Hadi and Mariam Khader (Champlain College) | Natural Language Processing (NLP) for Digital Forensics by Mia Mohammad Imran, Hala Ali, Kostadin Damevski and Irfan Ahmed (Virginia Commonwealth University) |
| 1815 | End of Day | |
| Monday, July 10 | ||
| 830 | Registration opens | |
| 930 | Welcome remarks | |
| 945 | Keynote: TBA | |
| 1045 | Break | |
| 1115 | Paper Session: Memory Forensics | |
| Session Chair: Irfan Ahmed | ||
| Windows Memory Forensics: Identification of (Malicious) Modifications in Memory-Mapped Image Files | Frank Block (Friedrich-Alexander University Erlangen-Nürnberg) | |
| Database Memory Forensics: Identifying Cache Patterns for Log Verification | James Wagner (University of New Orleans), Mahfuzul I. Nissan (University of New Orleans) and Alexander Rasin (DePaul University) | |
| As if Time Had Stopped – Checking Memory Dumps for Quasi-Instantaneous Consistency | Jenny Ottmann, Üsame Cengiz (both Friedrich-Alexander University Erlangen-Nürnberg), Frank Breitinger (University of Lausanne) and Felix Freiling (Friedrich-Alexander University Erlangen-Nürnberg) | |
| 1245 | Lunch | |
| 1345 | Paper Session: Network and Cloud Forensics | |
| Session Chair: Aisha Ali-Gombe | ||
| Using Relational Graphs for Exploratory Analysis of Network Traffic Data | Milan Cermak, Tatiana Fritzová, Vít Rusňák and Denisa Sramkova (Masaryk University) | |
| PREE: Heuristic Builder for Reverse Engineering of Network Protocols in Industrial Control Systems | Syed Ali Qasim, Wooyeon Jo and Irfan Ahmed (Virginia Commonwealth University) | |
| A Study on Cloud Data Access through Browser Credential Migration in Windows environment | Uk Hur, Soojin Kang, Giyoon Kim, Jongsung Kim (Kookmin University) | |
| 1515 | Break | |
| 1545 | Paper Session: IoT and Car Forensics | |
| Session Chair: James Wagner | ||
| IoT Forensics: Analysis of a HIKVISION’s mobile app | Evangelos Dragonas, Costas Lambrinoudakis (both University of Piraeus) and Michael Kotsis (University of West Attica) | |
| Dashcam Forensic Investigation Guidelines | Harjinder Lallie (University of Warwick) | |
| 1645 | Board of Directors update | |
| 1700 | Lighting Talks | |
| 1715 | Time on your own | |
| 1900 | Welcome Reception & Poster / Demos | |
| Tuesday, July 11 | ||
| 930 | Administrative remarks | |
| 945 | Keynote: TBD | |
| 1045 | Break | |
| 1115 | Paper Session: Data, Datasets, and Sharing | |
| Session Chair: Alex Nelson | ||
| Improving Trace Synthesis by Utilizing Computer Vision for User Action Emulation | Lukas Schmidt, Thomas Hupperich (both University of Münster) and Sebastian Kortmann (University of Amsterdam) | |
| Expanding Digital Forensics Education with Artifact Curation and Scalable, Accessible Exercises via the Artifact Genome Project | Cinthya Grajeda, Jessica Berrios, Sankofa Benzo, Emmanuel Ogunwobi (all University of New Haven) and Ibrahim Baggili (Louisiana State University) | |
| Sharing datasets for Digital Forensic: a novel taxonomy and legal concerns | Frank Breitinger (University of Lausanne) and Alexandre Jotterand (id est avocats) | |
| 1245 | Lunch | |
| 1345 | Paper Session: Forensics and AI | |
| Session Chair: Syed Ali Qasim | ||
| RGB_Mem : At the Intersection of Memory Forensics and Machine Learning | Aisha Ali-Gombe, Sneha Sudhakaran (Louisiana State University), Ramyapandian Vijayakanthan (Towson University) and Golden Richard (Louisiana State University) | |
| Combining AI and AM -- Improving Approximate Matching through Transformer Networks | Frieder Uhlig, Lukas Struppek, Dominik Hintersdorf (Technical University Darmstadt), Thomas Göbel, Harald Baier (Universität der Bundeswehr München) and Kristian Kersting (Technical University Darmstadt) | |
| 1445 | Break | |
| 1515 | Presentation Session | |
| Session Chair: Parag Rughani | ||
| The Remapped/Reallocated Sector Conundrum from a digital forensic investigation and data sanitisationperspective | Phil Turner (ADISA) | |
| The Quintilian Project - visualising reachable areas | Matthew Sorell (Digital Forensic Sciences Australia Pty Ltd) | |
| SaaS Forensics | Eoghan Casey (University of Lausanne) | |
| 1615 | Bird of Feather | |
| 1630 | Panel discussion | |
| 1715 | Time on your own | |
| 1900 | Gala Dinner (+Forensic Rodeo, Best Paper Award) | |
| Wednesday, July 12 | ||
| 1030 | Administrative remarks | |
| 1045 | Paper Session: Mobile and Application Forensics | |
| Session Chair: Jessica Hyde | ||
| Every Step You Take, I'll be Tracking You: Forensic Analysis of the Tile Tracker Application | Lauren Pace, Lasean Salmon, Christopher Bowen, Ibrahim Baggili and Golden Richard (Louisiana State University) | |
| Factorizing 2FA: Forensic Analysis of Two-Factor Authentication Applications | Jessica Berrios, Elias Mosher, Sankofa Benzo, Cinthya Grajeda (University of New Haven) and Ibrahim Baggili (Louisiana State University) | |
| Systematic Evaluation of Forensic Data Acquisition using Smartphone Local Backup | Julian Geus, Jenny Ottmann and Felix Freiling (Friedrich-Alexander University Erlangen-Nürnberg) | |
| 1215 | Closing remarks | |
| 1230 | Lunch | |
| 1315 | DFRWS Expedition starts | |
| 1730 | DFRWS Expedition ends | |
| 1900 | DFRWS 2023 Open Planning Meeting | |