Difference between pages "Legal issues" and "Upcoming events"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
== Hacker Defense (aka Trojan/Virus Defense) ==
+
<b>PLEASE READ BEFORE YOU EDIT THE LISTS BELOW</b><br>
 +
Events should be posted in the correct section, and in date order.  An event should NEVER be listed in more than one section (i.e. Ongoing/Continuous events should not be listed in Scheduled Training).  When events begin the same day, events of a longer length should be listed first.  New postings of events with the same date(s) as other events should be added after events already in the list. If a provider offers the same event at several locations simultaneously, the listing should have a single (ONE) entry in the list with the date(s) and ALL locations for the event. Please use three-letter month abbreviations (i.e. Sep, NOT Sept. or September), use two digit dates (i.e. Jan 01 NOT Jan 1), and use date ranges rather than listing every date during an event(i.e. Jan 02-05, NOT Jan 02, 03, 04, 05).<br>
 +
<i>Some conferences or training opportunities may be <u>limited</u> to <b>Law Enforcement Only</b> or to a specific audience.  Such restrictions should be noted when known.</i>
  
Below are accounts of different hacker/virus/Trojan related defensesAlbeit some of these are not ‘reputable’ web sources, but they should all have official court backing from wherever the various legal proceedings occurredAmong the below you’ll find successful (and also unsuccessful) Trojan defenses against charges for kiddie porn, DOS attacks and tax evasion.  They span from about 2003 to current and related to crimes/accusations back to about 2001.
+
This is a BY DATE listing of upcoming conferences and training events relevant to [[digital forensics]]It is not an all inclusive list, but includes most well-known activitiesSome events may duplicate events on the generic [[conferences]] page, but entries in this list have specific dates and locations for the upcoming event.
  
I have heard that the DC3 lab runs at least two types of anti-malware / anti-virus scanning on media as a matter of course[back this up anyone?], I’ve spoken with Nebraska State Patrol and county level investigators that do similarAnd the CPS (sort of FBI in UK) is training prosecutors en masse about ‘trojan defenses’ (link below). These types of actions would not occur unwarranted.  Why do all the extra work for nothing?
+
This listing is divided into four sections (described as follows):<br>
 +
<ol><li><b><u>Calls For Papers</u></b> - Calls for papers for either Journals or for Conferences, relevant to Digital Forensics (Name, Closing Date, URL)</li><br>
 +
<li><b><u>Conferences</u></b> - Conferences relevant for Digital Forensics (Name, Date, Location, URL)</li><br>
 +
<li><b><u>On-Going / Continuous Training</u></b> - Training opportunities that are either always available online/distance learning format or that are offered the same time every month (Name, date-if applicable, URL)</li><br>
 +
<li><b><u>[[Scheduled Training Courses]]</u></b> - Training Classes/Courses that are scheduled for specific dates/locationsThis would include online (or distance learning format) courses which begin on specific dates, instead of the "start anytime" courses listed in the previous section. (Name, Date(s), Location(s), URL) (''note: this has been moved to its own page.'')<br></li></ol>
  
“The "Trojan defense" has now become standard in many types of computer crime cases. But the defense often plays on the ignorance of juries and prosecutors. It has raised the need for the CPS to do more to explain complex technical issues in simple terms to judges and juries, says George.” (Esther George is the policy adviser at the Crown Protection Services)
+
The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multi-media Listserv.
http://www.computerweekly.com/Articles/2007/01/27/221526/high-tech-crime-is-put-on-trial.htm
+
<i> (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST)</i>
 +
Requests for additions, deletions or corrections to this list may be sent by email to David Baker <i>(bakerd AT mitre.org)</i>.
  
US man, Eugene Pitts, found not-guilty of tax evasion after blaming a computer virus.  Avoids ~$900,000 in fines.
+
== Calls For Papers ==
http://www.sophos.com/pressoffice/news/articles/2003/08/va_virustax.html  
+
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! Title
 +
! Due Date
 +
! Website
 +
|-
 +
|5th Australian Digital Forensics Conference
 +
|Sep 30, 2007
 +
|http://scissec.scis.ecu.edu.au/conferences2007/index.php?cf=1
 +
|-
 +
|2nd Small Scale Digital Device Forensics Journal
 +
|Oct 31, 2007
 +
|http://ssddfj.org/submit.asp
 +
|-
 +
|International Association of Forensic Science Annual Meeting
 +
|Jan 01, 2008
 +
|http://www.iafs2008.com/abstracts/intro.asp
 +
|-
 +
|Usenix Annual Technical Conference
 +
|Jan 07, 2008 (11:59PM PST)
 +
|http://www.usenix.com/events/usenix08/cfp/
 +
|-
 +
|Techno-Security 2008
 +
|May 04, 2008
 +
|http://www.techsec.com/html/TechnoPapers.html
 +
|-
 +
|}
  
United States v. Michael McCourt U.S. Court of Appeals Case 1/24/06 Western District of MissouriGuilty charge upheld.
+
== Conferences ==
http://www.ca8.uscourts.gov/opndir/06/11/061018P.pdf
+
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! Title
 +
! Date/Location
 +
! Website
 +
|-
 +
|14th International Conference on Image Analysis and Processing (ICIAP 2007)
 +
|Sep 10-14, Modena, Italy
 +
|http://www.iciap2007.org
 +
|-
 +
|3rd International Conference on IT-Incident Management & IT-Forensics
 +
|Sep 11-12, Stuttgart, Germany
 +
|http://www.imf-conference.org/
 +
|-
 +
|ForenSec Canada 2007
 +
|Sep 17-18, Regina, Saskatchewan, Canada
 +
|http://www.csiservices.ca/events.html#ForenSec
 +
|-
 +
|SANS Network Security
 +
|Sep 22-30, Las Vegas, NV
 +
|http://www.sans.org/ns2007/?portal=69456f95660ade45be29c00b0c14aea1
 +
|-
 +
|Black and White Ball
 +
|Sep 25-28, London, UK
 +
|http://www.theblackandwhiteball.co.uk/
 +
|-
 +
|Wisconsin Association of Computer Crimes Investigators/Forensic Association of Computer Technologists
 +
|Sep 26-28, Milwaukee, WI
 +
|http://www.byteoutofcrime.org
 +
|-
 +
|6th Annual Internet Crimes Against Children National Conference
 +
|Oct 15-18, San Jose, CA
 +
|http://www.icactraining.org/website/registration.html
 +
|-
 +
|ToorCon 9
 +
|Oct 19-21, San Diego, CA
 +
|http://toorcon.org/intro.php
 +
|-
 +
|BlackHat Japan - Briefings
 +
|Oct 23-26, Tokyo, Japan
 +
|http://www.blackhat.com/html/bh-japan-07/bh-jp-07-main.html
 +
|-
 +
|Global Conference on Economic and High-Tech Crime (Open to all)
 +
|Oct 24-26, Crystal City, VA
 +
|https://conference.nw3c.org/index.cfm
 +
|-
 +
|European Network Forensic and Security Conference 2007
 +
|Oct 24-26, Zuyd University, Heerlen, Netherlands
 +
|http://www.enfsc2007.com/
 +
|-
 +
|Techno-Forensics Conference
 +
|Oct 29 - 31, Rockville, MD
 +
|http://www.techsec.com/html/TechnoForensics2007.html
 +
|-
 +
|Computer Security Institute Annual Meeting
 +
|Nov 3-9, Arlington, VA
 +
|http://www.csiannual.com/
 +
|-
 +
|First Forensic Forum Conference (F3 Conference)
 +
|Nov 3-5, Tortworth, England
 +
|http://www.f3.org.uk/
 +
|-
 +
|DeepSec IDSC
 +
|Nov 22-24, Vienna, Austria
 +
|http://deepsec.net/
 +
|-
 +
|Digital Forensic Forum Prague 2007
 +
|Nov 26-27, Prague, Czech Republic
 +
|http://www.dff-prague.com/
 +
|-
 +
|PacSec Applied Security Conference
 +
|Nov 29-30, Tokyo, Japan
 +
|http://www.pacsec.jp/index.html
 +
|-
 +
|5th Australian Digital Forensics Conference
 +
|Dec 03, Edith Cowan University, Mount Lawley, WA, Australia
 +
|http://scissec.scis.ecu.edu.au/conferences2007/index.php?cf=1
 +
|-
 +
|HTCIA Asia Pacific Training Conference 2007
 +
|Dec 12-14, Hong Kong
 +
|http://2007.htcia.org.hk
 +
|-
 +
|SANS Security 2008
 +
|Jan 11-19, New Orleans, LA
 +
|http://www.sans.org/security08/
 +
|-
 +
|DoD Cyber Crime Conference 2008
 +
|Jan 13-18, St. Louis, MO
 +
|http://www.dodcybercrime.com/
 +
|-
 +
|4th Annual IFIP WG 11.9 International Conference on Digital Forensics
 +
|Jan 27-30, Kyoto, Japan
 +
|http://www.ifip119-kyoto.org/doku.php
 +
|-
 +
|AAFS Annual Meeting 2008
 +
|Feb 18-23, Washington, DC
 +
|http://aafs.org/default.asp?section_id=meetings&page_id=aafs_annual_meeting
 +
|-
 +
|CanSecWest Security Conference 2008
 +
|Mar 19-21, Vanouver, BC, Canada
 +
|http://cansecwest.com/
 +
|-
 +
|EuSecWest Security Conference 2008
 +
|May 21-22, London, England
 +
|http://eusecwest.com/
 +
|-
 +
|Techno-Security 2008
 +
|Jun 01-04, Myrtle Beach, SC
 +
|http://www.techsec.com/html/Techno2008.html
 +
|-
 +
|Usenix Annual Technical Conference
 +
|Jun 22-27, Boston, MA
 +
|http://www.usenix.com/events/usenix08/
 +
|-
 +
|International Association of Forensic Sciences Annual Meeting
 +
|Jul 21-26, New Orleans, LA
 +
|http://www.iafs2008.com/
 +
|-
 +
|Digital Forensic Research Workshop
 +
|Aug 11-13, Baltimore, MD
 +
|http://www.dfrws.org
 +
|-
 +
|}
  
Karl Schofield walked free from court yesterday after prosecutors accepted an expert's report that the "Trojan" program could have saved the 14 depraved images off the internet without his knowledge. http://www.getreading.co.uk/news/6/6541/program_put_child_porn_pics_on_my_pc
+
== On-going / Continuous Training ==
 
+
{| border="0" cellpadding="2" cellspacing="2" align="top"
Julian Green, 45, of Torquay, Devon was cleared in court in July of 13 charges of making indecent images, claiming computer malware was to blame.
+
|- style="background:#bfbfbf; font-weight: bold"
http://www.sophos.com/pressoffice/news/articles/2003/08/va_porntrojan.html
+
! Title
 
+
! Date/Location or Venue
Aaron Cafrey acquitted with Trojan defense after US authorities claimed traced DOS activity to his machine
+
! Website
http://news.com.com/2100-7349-5092781.html?tag=txt
+
|-
 
+
|Basic Computer Examiner Course - Computer Forensic Training Online
A former Georgia teacher blames computer viruses for altering his Web sites and uploading child porn images. Guilty charge upheld.
+
|Distance Learning Format
http://news.zdnet.com/2100-1009_22-6130218.html
+
|http://www.cftco.com
 
+
|-
Odd spin on the issue, where a hacker used a Trojan to gain access to potential pedophile’s computers.
+
|Linux Data Forensics Training
http://www.darkreading.com/document.asp?doc_id=118157
+
|Distance Learning Format
 
+
|http://www.crazytrain.com/training.html
Bandy’s defense attorney asserted that a “virus” or “trojan” must have downloaded the child pornography to Bandy’s computer without his knowledge.
+
|-
http://www.foxnews.com/story/0,2933,247903,00.html
+
|SANS On-Demand Training
 
+
|Distance Learning Format
A man found with more than 1,700 indecent images of children on his computer claimed a virus was to blame, a court heard. But Mark Craney, 33, from Knowle, was found guilty at Warwick Crown Court on 16 charges of making indecent images of children by downloading them onto his computer. http://icbirmingham.icnetwork.co.uk/0100news/0100localnews/tm_objectid=15104065&method=full&siteid=50002&headline=man-blamed-net-virus-for-child-porn-name_page.html
+
|http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
 
+
|-
+
|MaresWare Suite Training
 
+
|First full week every month, Atlanta, GA
More links from previous research.  (feel free to write more about these than just the links, that's the joy of a wiki).
+
|http://www.maresware.com/maresware/training/maresware.htm
 
+
|-
[1] http://www.cnn.com/2003/TECH/internet/10/28/hacker.defense.reut/index.html
+
|Evidence Recovery for Windows Vista&trade;
 
+
|First full week every month, Brunswick, GA
[2] http://news.com.com/2100-7349_3-5092781.html
+
|http://www.internetcrimes.net
 
+
|-
[3]http://www.fedlawyerguy.org/2003/11/the_trojan_defense.html
+
|Evidence Recovery for Windows Server&reg; 2003 R2
 
+
|Second full week every month, Brunswick, GA
[4]http://www.theregister.co.uk/2003/04/24/trojan_defence_clears_man/
+
|http://www.internetcrimes.net
 
+
|-
[5]http://www.austlii.edu.au/au/cases/cth/high_ct/2006/39.html
+
|Evidence Recovery for the Windows XP&trade; operating system
 
+
|Third full week every month, Brunswick, GA
[6]http://www.castlecops.com/modules.php?name=News&file=print&sid=2946
+
|http://www.internetcrimes.net
 
+
|-
[7] http://direct.bl.uk/bld/PlaceOrder.do?UIN=161932125&ETOC=RN&from=searchengine
+
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
 
+
|Third weekend of every month (Fri-Mon), Dallas, TX
+
|http://www.md5group.com
 
+
|-
 
+
|}
 
+
==[[Scheduled Training Courses]]==
 
+
 
+
 
+
== External Links ==
+
 
+
* [http://www.cybersecurityinstitute.biz/tpicq.htm The "Tools Proven in Court" Question]
+

Revision as of 08:19, 17 September 2007

PLEASE READ BEFORE YOU EDIT THE LISTS BELOW
Events should be posted in the correct section, and in date order. An event should NEVER be listed in more than one section (i.e. Ongoing/Continuous events should not be listed in Scheduled Training). When events begin the same day, events of a longer length should be listed first. New postings of events with the same date(s) as other events should be added after events already in the list. If a provider offers the same event at several locations simultaneously, the listing should have a single (ONE) entry in the list with the date(s) and ALL locations for the event. Please use three-letter month abbreviations (i.e. Sep, NOT Sept. or September), use two digit dates (i.e. Jan 01 NOT Jan 1), and use date ranges rather than listing every date during an event(i.e. Jan 02-05, NOT Jan 02, 03, 04, 05).
Some conferences or training opportunities may be limited to Law Enforcement Only or to a specific audience. Such restrictions should be noted when known.

This is a BY DATE listing of upcoming conferences and training events relevant to digital forensics. It is not an all inclusive list, but includes most well-known activities. Some events may duplicate events on the generic conferences page, but entries in this list have specific dates and locations for the upcoming event.

This listing is divided into four sections (described as follows):

  1. Calls For Papers - Calls for papers for either Journals or for Conferences, relevant to Digital Forensics (Name, Closing Date, URL)

  2. Conferences - Conferences relevant for Digital Forensics (Name, Date, Location, URL)

  3. On-Going / Continuous Training - Training opportunities that are either always available online/distance learning format or that are offered the same time every month (Name, date-if applicable, URL)

  4. Scheduled Training Courses - Training Classes/Courses that are scheduled for specific dates/locations. This would include online (or distance learning format) courses which begin on specific dates, instead of the "start anytime" courses listed in the previous section. (Name, Date(s), Location(s), URL) (note: this has been moved to its own page.)

The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multi-media Listserv. (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST) Requests for additions, deletions or corrections to this list may be sent by email to David Baker (bakerd AT mitre.org).

Calls For Papers

Title Due Date Website
5th Australian Digital Forensics Conference Sep 30, 2007 http://scissec.scis.ecu.edu.au/conferences2007/index.php?cf=1
2nd Small Scale Digital Device Forensics Journal Oct 31, 2007 http://ssddfj.org/submit.asp
International Association of Forensic Science Annual Meeting Jan 01, 2008 http://www.iafs2008.com/abstracts/intro.asp
Usenix Annual Technical Conference Jan 07, 2008 (11:59PM PST) http://www.usenix.com/events/usenix08/cfp/
Techno-Security 2008 May 04, 2008 http://www.techsec.com/html/TechnoPapers.html

Conferences

Title Date/Location Website
14th International Conference on Image Analysis and Processing (ICIAP 2007) Sep 10-14, Modena, Italy http://www.iciap2007.org
3rd International Conference on IT-Incident Management & IT-Forensics Sep 11-12, Stuttgart, Germany http://www.imf-conference.org/
ForenSec Canada 2007 Sep 17-18, Regina, Saskatchewan, Canada http://www.csiservices.ca/events.html#ForenSec
SANS Network Security Sep 22-30, Las Vegas, NV http://www.sans.org/ns2007/?portal=69456f95660ade45be29c00b0c14aea1
Black and White Ball Sep 25-28, London, UK http://www.theblackandwhiteball.co.uk/
Wisconsin Association of Computer Crimes Investigators/Forensic Association of Computer Technologists Sep 26-28, Milwaukee, WI http://www.byteoutofcrime.org
6th Annual Internet Crimes Against Children National Conference Oct 15-18, San Jose, CA http://www.icactraining.org/website/registration.html
ToorCon 9 Oct 19-21, San Diego, CA http://toorcon.org/intro.php
BlackHat Japan - Briefings Oct 23-26, Tokyo, Japan http://www.blackhat.com/html/bh-japan-07/bh-jp-07-main.html
Global Conference on Economic and High-Tech Crime (Open to all) Oct 24-26, Crystal City, VA https://conference.nw3c.org/index.cfm
European Network Forensic and Security Conference 2007 Oct 24-26, Zuyd University, Heerlen, Netherlands http://www.enfsc2007.com/
Techno-Forensics Conference Oct 29 - 31, Rockville, MD http://www.techsec.com/html/TechnoForensics2007.html
Computer Security Institute Annual Meeting Nov 3-9, Arlington, VA http://www.csiannual.com/
First Forensic Forum Conference (F3 Conference) Nov 3-5, Tortworth, England http://www.f3.org.uk/
DeepSec IDSC Nov 22-24, Vienna, Austria http://deepsec.net/
Digital Forensic Forum Prague 2007 Nov 26-27, Prague, Czech Republic http://www.dff-prague.com/
PacSec Applied Security Conference Nov 29-30, Tokyo, Japan http://www.pacsec.jp/index.html
5th Australian Digital Forensics Conference Dec 03, Edith Cowan University, Mount Lawley, WA, Australia http://scissec.scis.ecu.edu.au/conferences2007/index.php?cf=1
HTCIA Asia Pacific Training Conference 2007 Dec 12-14, Hong Kong http://2007.htcia.org.hk
SANS Security 2008 Jan 11-19, New Orleans, LA http://www.sans.org/security08/
DoD Cyber Crime Conference 2008 Jan 13-18, St. Louis, MO http://www.dodcybercrime.com/
4th Annual IFIP WG 11.9 International Conference on Digital Forensics Jan 27-30, Kyoto, Japan http://www.ifip119-kyoto.org/doku.php
AAFS Annual Meeting 2008 Feb 18-23, Washington, DC http://aafs.org/default.asp?section_id=meetings&page_id=aafs_annual_meeting
CanSecWest Security Conference 2008 Mar 19-21, Vanouver, BC, Canada http://cansecwest.com/
EuSecWest Security Conference 2008 May 21-22, London, England http://eusecwest.com/
Techno-Security 2008 Jun 01-04, Myrtle Beach, SC http://www.techsec.com/html/Techno2008.html
Usenix Annual Technical Conference Jun 22-27, Boston, MA http://www.usenix.com/events/usenix08/
International Association of Forensic Sciences Annual Meeting Jul 21-26, New Orleans, LA http://www.iafs2008.com/
Digital Forensic Research Workshop Aug 11-13, Baltimore, MD http://www.dfrws.org

On-going / Continuous Training

Title Date/Location or Venue Website
Basic Computer Examiner Course - Computer Forensic Training Online Distance Learning Format http://www.cftco.com
Linux Data Forensics Training Distance Learning Format http://www.crazytrain.com/training.html
SANS On-Demand Training Distance Learning Format http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
MaresWare Suite Training First full week every month, Atlanta, GA http://www.maresware.com/maresware/training/maresware.htm
Evidence Recovery for Windows Vista™ First full week every month, Brunswick, GA http://www.internetcrimes.net
Evidence Recovery for Windows Server® 2003 R2 Second full week every month, Brunswick, GA http://www.internetcrimes.net
Evidence Recovery for the Windows XP™ operating system Third full week every month, Brunswick, GA http://www.internetcrimes.net
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Third weekend of every month (Fri-Mon), Dallas, TX http://www.md5group.com

Scheduled Training Courses