The Center for Education and Research in Information Assurance and Security (CERIAS)

The Center for Education and Research in
Information Assurance and Security (CERIAS)

SADFE 2005 Call For Papers

Wed, June 08, 2005Call For Papers
SADFE 2005

First International Workshop


on


Systematic Approaches to Digital Forensic Engineering


November 7-10, 2005


Taipei, Taiwan



Call For Papers


The SADFE (Systematic Approaches to Digital Forensic Engineering) International Workshop is intended to further the advancement of computer forensic engineering by promoting innovative & leading-edge systematic approaches to cyber crime investigation. The workshop brings together top digital forensic researchers, advanced tool/product builders, and expert law enforcement from around the world for information exchange and R&D collaboration.

Today’s cyber investigation faces many difficult challenges. In the 2001 US v. Gorshkov case, the hackers employed a wide array of distributed Perl scripts that transcend across national boundaries to trigger massive amount of coordinated online auctions, email confirmations, and other fake transactions to accomplish fraudulent electronic fund transfers on numerous stolen credit card records. Under such a reality, the foremost daunting challenge is the discovery and collection of voluminous and often globally distributed digital evidences. At the same time, increasing sophistication of modern cyber crimes further adds to the difficulty of correlating and piecing together physical and digital evidence for scenario reconstruction. Additionally, both legal and technical teams must work closely together to build a court-admissible case toward eventual conviction. This frequently implies that the strategy and the direction of the investigation may not be entirely technically driven at times. Issues such as privacy, admissibility and international laws often require careful consideration.

Modern digital forensic engineering needs to go beyond mere tool application and evidence gathering. Such an ad-hoc approach is becoming increasingly limited in effectiveness and scalability. Therefore, in addition to advanced digital evidence discovery, gathering and correlation, SADFE recognizes the value of solid digital forensic engineering processes based on both technical and legal grounds. SADFE further recognizes the need of advanced forensic-enabled and proactive monitoring/response technologies. SADFE 2005 solicits broad-based, innovative digital forensic engineering technology, practical experience & process related submissions in the following areas:

o Systematic engineering processes & methodologies for computer forensic


o Advanced techniques in evidence collection, search, analysis, correlation, handling and preservation


o Progressive cyber crime scenario analysis and reconstruction technology


o Legal case construction & digital evidence support


o Legal and technical collaboration


o Legal and technical aspects of tool validation


o Courtroom expert witness and case presentation


o Intrusion detection systems (IDS) for computer forensic


o Forensics of embedded devices (e.g. digicams, cell phones)


o Innovative forensic engineering tools and applications


o Attack strategy analysis & modeling


o Privacy, legal and legislation issues


o Monitoring and incident response


o Forensic-enabled architectures and processes


o Advanced system and application log analysis


The SADFE workshop will be preceded by a two-day tutorial sessions (November 7-8) delivered by the invited speakers. The SADFE workshop session (November 9-10) will consist of invited talks, paper presentations and panel discussions. All presentations, talks and panel discussions will be made in English. Each presentation is limited to 20 minutes and panels 60 minutes.

Important Dates



Deadline for paper submissions: June 15, 2005


Deadline for panel proposal submissions: July 1, 2005


Notification of acceptance or rejection: ? July 25, 2005


Final paper camera ready copy: August 20, 2005


SADFE conference dates: November 7-10, 2005


Organizing Committee



Honorary Chair: Der-Tsai Lee dtlee@iis.sinica,edu.tw—Taiwan Information Security


General Chair: Chi Sung Laih laihcs@eembox.ncku.edu.tw—National Cheng Kung University


Program Co-Chair: Ming-Yuh Huang ming-yuh.huang@boeing.com—The Boeing Company


Program Co-Chair: Jung-Shian Li jsli@mail.ncku.edu.tw—National Cheng Kung University


Publication Chair: Phil Attfield attfield@att.net—Northwest Security Institute


Publicity Chair: Bernard Jouga bernard.jouga@rennes.supelec.fr—Supelec


Tutorial Chair: So-Lin Yen m11007@mjib.gov.tw—Investigation Bureau, Ministry of Justice


Treasure Chair: Tzong-Chen Wu tcwu@cs.ntust.edu.tw—National Taiwan University of Science and Technology



Program Committee



Phil Attfield (Northwest Security Institute-USA, Canada)


Sudhir Aggarwal (Florida State University, USA)


Bill Caelli (Queensland University of Technoloty, Australia)


Bomy YinChieh Chen (Taipei County Police Bureau, Taiwan)


Patrick S. Chen (Tatung University, Taiwan)


K. P. Chow (University of Hong Kong, Hong Kong)


Dario Forte (University of Milano, Italy)


Yong Guan (Iowa State University, USA)


Ajantha Herath (Richard Stockton College of New Jersey, USA)


Ming-Yuh Huang (The Boeing Company, USA)


Bernard Jouga (Supelec, France)


Nigel Jones (National Specialist Law Enforcement Center, United Kingdom)


Javier Lopez (University of Malaga, Spain)


Jung-Shian Li (National Cheng Kung University, Taiwan)


Michael Losavio (University of Louisville, USA)


Rodney McKemmish (KPMG Forensic, Australia)


George Mohay (Queensland University of Technology, Australia)


Rich Nolan (US CERT, CMU, USA)


Vassil Roussev (University of New Orleans, USA)


Steven Schroeder (Seattle University, USA)


Olivier de Vel (Defence Science and Technology Organisation, Australia)


Tzong-Chen Wu (National Taiwan University of Science and Technology, Taiwan)


Submissions
Authors are invited to submit their papers electronically. All submissions must be in English and are to be made via web submission interface. Submissions must conform to this procedure and be received within the submission deadline in order to be considered. Submissions will be refereed by the SADFE 2005 Program Commitee for acceptance. Accepted papers will be published in the SADFE 2005 Workshop Proceedings by IEEE Computer Society. Each paper is limited to 15 pages and the authors are expected to present his/her own paper.

Corporate Sponsors
We solicit interested organizations to serve as sponsors for SADFE 2005. Please contact the General Chair, (laihcs@eebox.ncku.edu.tw), for information regarding corporate sponsorship of SADFE 2005.

Proceedings
In order for a paper to appear in the published proceedings, the authors must present his/her own paper. Accepted papers will be published by IEEE Computer Society. Instructions for authors are available at IEEE Computer Society Conference Publishing Services.( Book Trim Size: 6” x 9” ).

For further information, please visit http://conf.ncku.edu.tw/sadfe/, contact General Chair (Chi Sung Laih) or Program Chair (Ming-Yuh Huang or Jung-Shian Li).

Get Your Degree with CERIAS