Main Menu
|
|
 Home Forums Search Members options Web |
|
|
|
|
|
You can find DFF at
|
|
|
|
|
|
|
|
DFF Prague 2007 Meeting Conclusions |
|
 Basic information
Date and place: 26 - 27 November 2007, Prague, Czech Republic.
Number of participants: 35
Number of presentattions: 12
Working meetings: 3
Basic themes
General
What is Digital Forensics?
This question was underlined many times. There was not made a conclusion, no answer was found for this question, but a lot of speakers underlined very complex and complicated character of digital examination, moving from "classic" disc/files/data examination to very complicated analysis.
Need of fundamental theoretical analysis of this problem was published and basic standpoints were defined:
 Basic problems of Digital forensics are not technical, but managerial, conceptional, procedural.
Digital forensic examination is a complex problem and it is necessary to build-up a "systematic approach". Digital forensics science should be analysed using system approach consisting of a lot of components and relationships.
Digital forensic examination is not only one forensic discipline, but a lot of specific disciplines, where various aspects of digital world are examined. In information society nearly each phenomen, each people's activity in "material" world has its mirror in the "digital" world. As in the "material" world we can recognise a lot of forensic disciplines, similar disciplines should be defined also for forensic analysis of the "digital" world.
These standpoints need serious analysis and fundamental discussion.
Education, certification
Education is one of the crucial problems.
Education must be provided by independent bodies.
Education must be oriented not only to the forensic experts, but must be more complex, covering also all kinds of "clients" (ie. all subjects involved in digital forensic "chain"), like
* judges,
* attorneys,
* police officers,
* investigators,
* info-sec specialists and managers
* etc.
Certification is not enough for qualification approving, complex assessment should be made:
* General education
* Special digital forensic education
* Exams and certificates
* Practical experience
Technical aspects
Technical aspects are important, examination is carried out using technology, but techology is only a tool for forensic examination. Thanks to lots of accesable information sources, majority of all technological problems are solvable this time.
DFF Prague 2007 Meeting compared different concepts of digital forensics labs, from very simply built to very sophisticated and expensive large commercial laboratory.
This comparison approved theses about important role of management and process-oriented approach. The size and the used technology do not predictate the quality of digital forensic examination in general.
Organisation
DFF mail-list would be fine for further communication.
Form of meeting as a "discussion club" was acepted very positively
Need for more precised specification/orientation of DFF was presented
Note about a little move of the date of the meeting towards warmer weather was presented
Conclusions
DFF Prague 2007 Meeting was assessed positively by participants, mainly because of:
* Unformal and creative atmosphere
* Open discussions
* Active participant's attitude
* Space for brainstorming discussions
* High experience and qualification of participants
* Proffesionalism of speakers
* Presented papers and discussions referred to the core problems of the digital forensics science and everyday practice
DFF should be spread over the world, at least India and ME regions urgently feel the need of this kind of meetings.
Note: (Your comments are welcomed)
|
|
Posted by msve on Wednesday, January 09, 2008 (14:35:27) (914 reads)
|
|
|
|
|
Associated Topics
 |
|
|
|
|
| "DFF Prague 2007 Meeting Conclusions" | Login/Create an Account | 0 comments |
|
|
| The comments are owned by the poster. We aren't responsible for their content. |
|
|
|
|
|
|
|
Related Links
|
|
|
|
|
|
|
|
Article Rating
|
|
Average Score: 5
Votes: 1
|
|
|
|
|
|
Options
|
|
|
|
|
|
|
|
