SUMMER SCHOOL 2019
WHAT: 1st International Summer School on Computational Forensics (SuCoFo2019)
WHEN: 26–30 August 2019
WHERE: Lillehammer, Norway
Today’s challenges within digital forensics and pattern recognition delve into a range of comprehensive research topics. Being in the forefront of this research fields means closely following the developments in science and technology. To provide a clear and in-depth picture on the state-of-the-art within digital forensics and pattern recognition, both under the theoretical and scientific point of view, as well as in the diverse application domains, the Norwegian University of Science and Technology (NTNU) in cooperation with the COST Action CA17124 “Digital forensics: evidence analysis via intelligent systems and practices” and the International Association of Pattern Recognition (IAPR) – TC6 on Computational Forensics, organized the
1st International Summer School on Computational Forensics (SuCoFo2019)
World-renowned experts, both from academia and industry, were teaching the various topics presented. This gave the participants a unique opportunity to hear influential keynote speakers as well as benefit from interaction and discussions with international experts within the field. The course covered both theoretical and practical aspects of computational forensics and pattern recognition problems, as well as examples of their successful commercialisation.
IMPORTANT INFORMATION:
Information Summerschool.pages
Program of the Summer School
Place: Lillehammer, Norway
Sunday (25.08)
Arrival of the participants from Oslo Gardermoen Airport (nearly 2 hours by train)
Monday (26.08)
08:00-08:30 Registration
08:30-09:00 Welcome from COST Action CA17124 ( Katrin )
09:00-11:00 Zeno :: Digital & Multimedia Forensic Science
11:00-11:30 Break
11:30-13:00 Katrin :: Computational Forensic Science
13:00-14:00 Lunch
14:00-15:30 Thomas :: Economic Crime Investigation : Practical Challenges & Needs
15:30-16:00 Break
16:00-17:00 Presentation by participants (5 minutes lightning talk + QA + posters)
- Individual dinner arrangement
Tuesday (27.08)
09:00-11:00 Roger / Geir Olav :: Cyber Operations & Intelligence
11:00-11:30 Break
11:30-12:15 My Thai :: Security, Forensics and Privacy in Online Social Networks
12:15-13:00 Yier Jin :: Security and Forensics in the IoT Era
13:00-14:00 Lunch
14:00-15:30 Jens-Petter :: Forensic Analysis of Blockchains
15:30-16:00 Break
16:00-17:00 Presentation by participants (5 minutes lightning talk + QA + posters)
- Individual dinner arrangement
Wednesday (28.08)
09:00-11:00 Harm :: Hansken – Digital Forensics as a Service
11:00-11:30 Break
11:30-13:00 Raymond: Digital forensics in the big data era: Challenges and Opportunities
13:00-14:00 Lunch
14:00-15:30 Raymond: Digital forensics in the big data era: Brainstorming
15:30-16:00 Break
16:00-21:00 Jeff :: Digital Forensics Lab : All Hands-On
- Pizza dinner included
Thursday (29.08)
09:00-11:00 Ali :: Malware Forensics incl. Hands-On
11:00-11:30 Break
11:30-12:30 Ali :: Malware Forensics incl. Hands-On (continued)
12:30-13:00 Bente :: Smart City Policing : Practical Challenges & Need
13:00-14:00 Lunch
14:00-17:00 Individual feedback to participants + QA + posters
14:00-17:00 Study tour Maihaugen (alternative)
19:00-21:00 Social Event in Lillehammer
- Dinner included
Friday (30.08)
09:00-11:00 Inger Marie :: Digital Forensics & the Rule of Law
11:00-11:30 Break
11:30-12:30 Mark :: Computer Vision Aided Forensic Investigation
12:30-13:00 Closing Remarks & Feedback for future ( Katrin )
13:00-14:00 Lunch
14:00 Participants leaving towards Oslo Gardermoen Airport (nearly 2 hours by train)
Short CV of the teachers
Dr. Harm van Beek
… is a Forensic Scientist at the Netherlands Forensic Institute (NFI). His work consists of performing examinations in criminal cases and conducting scientific research in the digital forensic field. Harm is one of the founders of the forensic investigation, innovation and knowledge sharing platform ‘Hansken’. Furthermore, he is program manager of the Digital Forensics innovation program of the NFI. Harm obtained his Ph.D. degree in formal methods (computer science) at the Eindhoven University of Technology. Before joining the NFI, he was founder and CTO of ISAAC, a company dedicated to developing middleware and software for the Internet.
Dr. Kim Kwang (Raymond) Choo
… holds a Ph.D. in information technology from Queensland University of Technology, Australia. Prior to starting his Cloud Technology Endowed Professorship at UTSA, Professor Choo spent five years working for the University of South Australia, and five years working for the Australian Government Australian Institute of Criminology. He was also a visiting scholar at INTERPOL Global Complex for Innovation between October 2015 and February 2016 and a visiting Fulbright scholar at Rutgers University School of Criminal Justice and Palo Alto Research Center (formerly Xerox PARC) in 2009. Professor Choo’s areas of research include big data analytics, cyber security and digital forensics. ( https://business.utsa.edu/faculty/kim-kwang-raymond-choo/ )
Dr. Ali Dehghantanha
… is the director of Cyber Science Lab (https://cybersciencelab.org/) in University of Guelph, Ontario, Canada. His lab is focused on building AI-powered solutions to support cyber threat attribution, cyber threat hunting and digital forensics tasks in Internet of Things (IoT), Industrial IoT, and Internet of Military of Things (IoMT) environments. Ali has served for more than a decade in a variety of industrial and academic positions with leading players in Cyber-Security and Artificial Intelligence. Prior to joining UofG, he has served as a Sr. Lecturer in the University of Sheffield, UK and as an EU Marie-Curie International Incoming Fellow at the University of Salford, UK. He has a PhD in Security in Computing and a number of professional certifications including CISSP and CISM. ( https://www.uoguelph.ca/computing/people/ali-dehghantanha/ )
Maj/Dr. Geir Olav Dyrkolbotn
…is an officer in the Norwegian Armed Forces and an associate professor at the Center for Cyber and Information Security (CCIS) at the Norwegian University of Science and Technology (NTNU). He is currently head of the NTNU Malware Lab and the research group for cyber defence at CCIS. Geir Olav holds a PhD in information security from Gjøvik University College (HiG) and an MSc in computer science from the NTNU. His career includes more than 25 years in the Norwegian Armed Forces, where he holds the rank of Major. His career has focused on operation, maintenance and security in tactical communication systems and the last 15 years on defensive cyber operations, computer network defense and operational security. His research interests include cyber defense, reverse engineering and malware analysis, side-channel attacks and machine learning.
Dr. Katrin Franke
… is a (full) professor of computer science and head of the Digital Investigation and Forensics group at the Norwegian University of Science and Technology (NTNU). In 2007 she joined the Norwegian Information Security Lab (NISlab) with the mission to establish research and education in digital and computational forensics. In this context she was instrumental in setting up the partnership with the Norwegian police organisations as part of the Center for Cyber and Information Security (CCIS, www.ccis.no ). Dr. Franke has 25+ years experience in basic and applied research for financial services & law enforcement agencies (LEAs) working closely with banks and LEAs in Europe, North America, and Asia. Katrin Franke obtained her Ph.D. degree at the Artificial Intelligence Institute, University of Groningen, The Netherlands in 2007. For her contributions to Computational Forensics she received the IAPR* Young Investigator Award in the year 2009. (* International Association of Pattern Recognition, www.iapr.org )
Dr. Zeno Geradts
… is a senior forensic scientist at the Netherlands Forensic Institute of the Ministry of Justice at the Digital Evidence and Biometrics section in the area of forensic (video) image processing and biometrics within the team Forensic Big Data Analysis. From September 1st 2014, he is appointed as (full) professor on forensic data science by special appointment at the University of Amsterdam. He is chairman of the Forensic IT working group of European Network of Forensic Science Institutes (ENFSI, www.enfsi.eu ). From February 2019 to February 2020 he is President of the American Academy of Forensic Sciences (AAFS, www.aafs.org ).
Mr. Jeffery D. Hamm
… has been employed with Mandiant since 2010 and is a Technical Director helping improve operations and internal process in the Managed Defense services. He was formerly assigned to the Europe region, where he managed a team that conducts forensic examinations and incident response. He also works part-time as an assistant professor at NTNU (Norwegian Science and Technology University) in Gjøvik, Norway since 2011. He has co-authored “Digital Forensics” edited by Andre Arnes in 2017. The book is designed for academia and practitioners. Jeff has significant experience in the computer forensic field and obtained his CFCE (Certified Computer Forensic Examiner) in 2003. He obtained his ACE (AccessData Certified Examiner) in 2008, his EnCE (EnCase Certified Examiner) in 2010, and his GCFA (GIAC Computer Forensic Analyst) in 2010. He has been instructing in the field of computer forensics since 2004 at IACIS (The International Association of Computer Investigative Specialists).
Dr. Yier Jin
… is the Endowed IoT Term Professor in the Warren B. Nelms Institute for the Connected World and also an Associate Professor in the Department of Electrical and Computer Engineering (ECE) in the University of Florida (UF). Prior to joining UF, he was an assistant professor in the ECE Department at the University of Central Florida (UCF). He received his PhD degree in Electrical Engineering in 2012 from Yale University after he got the B.S. and M.S. degrees in Electrical Engineering from Zhejiang University, China, in 2005 and 2007, respectively. His research focuses on the areas of embedded systems design and security, trusted hardware intellectual property (IP) cores and hardware-software co-design for modern computing systems. His is currently focusing on the design and security analysis on Internet of Things (IoT) and wearable devices with particular emphasis on information integrity and privacy protection in the IoT era. Dr. Jin received Young Investigator Grant from Southeastern Center for Electrical Engineering Education (SCEEE) in 2015, early CAREER award from Department of Energy (DoE) in 2016, Outstanding New Faculty Award (ONFA) from ACM’s Special Interest Group on Design Automation (SIGDA) in 2017, and Young Investigator Award (YIP) from Office of Naval Research (ONR) in 2019. He also received the Best Paper Award of the 52nd Design Automation Conference in 2015, the 21st Asia and South Pacific Design Automation Conference (DAC) in 2016, the 10th IEEE Symposium on Hardware-Oriented Security and Trust (HOST) in 2017, the 2018 ACM Transactions on Design Automation of Electronic Systems (TODAES), the 28th edition of the ACM Great Lakes Symposium on VLSI (GLSVLSI) in 2018, and the Design, Automation and Test in Europe Conference and Exhibition (DATE) in 2019. He is the IEEE Council on Electronic Design Automation (CEDA) Distinguished Lecturer.
Lieutenant Colonel Roger Johnsen
… has more than 20 years of experience from cyberoperations. Among other positions, he has served as commanding officer of the Norwegian defence Cyber defence unit, headmaster of the Norwegian defence Cyber academy, CEO of the Norwegian centre for information security, Senior Staff officer at the Norwegian Joint Headquarters, and is currently heading the concept development department at the Norwegian Defence Cyber Defence Forces. In addition, Johnsen teaches cyber tactics at NTNU. Through his work, he has led several cyber defence operations, advised private companies in handling cyber incidents, and been engaged in developing concepts and tactics for handling real-life cyber threats.
Dr. Mark Scanlon
… is a Tenured Assistant Professor in the UCD School of Computer Science (UCD CS), Principal Investigator for Cybersecurity at the €2m funded Centre for Applied Data Analytics Research and Machine Learning (CeADAR), Founding Director of the UCD Forensics and Security Research Group, and the Director of the School’s MSc in Forensic Computing and Cybercrime Investigation. He is on the Management Committee Core Group for the EU COST Action CA17124 – Digital forensics: evidence analysis via intelligent systems and practices, a Fulbright Scholar in Cybersecurity and Cybercrime Investigation, a Visiting Researcher at the Centre for Education and Research in Information Assurance and Security (CERIAS) in Purdue University, USA. His research interests include Automated Evidence Processing, Computer Vision Aided Forensic Investigation, Intelligent Systems for Cybersecurity, and Network Forensics and Analytics. To date, Dr. Scanlon has published over 50 peer-reviewed international conference and journal publications, and has been presented with four Best Paper Awards. Dr. Scanlon is an extremely active member of the digital forensics and cybersecurity research communities and is a keynote speaker, associate editor, reviewer, and conference organiser across a range of key journals and conferences in these fields.
Dr. Bente Skattør
… is Senior Advisor ICT, in the department of business governance at Oslo Police District (OPD) in Norway. She has extensive experience as a project/program manager in Norway, Cross Nordic and globally. This involves innovation, automation, changes, improvements with high risk and complexity. She holds a PhD in Mobile Human Computer Interaction and Cand. Scient (equivalent to MSc) within system development methodology. She has started on Executive Master of Management focus on innovation and culture. She is the lead of policing in smart city in OPD. Interests are AI, Big Data and Innovation/Change Management, i.e. the interaction between work processes, change culture and ICT/Digitalization.
Dr. Inger Marie Sunde
… is professor of law at the Norwegian Police University College (Politihøgskolen) in Oslo, and leader of the multidisciplinary research group Policing in a Digitized Society. She is co-editor of the anthology “Det digitale er et hurtigtog!” – Vitenskapelige perspektiver på politiarbeid, digitalisering og teknologi» (2019) (“The Digital is a high speed train!” – scientific perspectives on policing, digitization and technology) in which she has a chapter concerning online policing with chatbots. She is also co-author of “Digital Forensics” (A. Årnes ed.), 2018, Wiley, with a chapter concerning Cybercrime Law. From 1994 until end 2004 she held position as senior public prosecutor in ØKOKRIM (the Norwegian Authority for the investigation and prosecution of Economic and Environmental Crime), where she was in charge of establishing the Norwegian Computer Crime Center in the police (1997-end 2004). For more than 20 years she has worked with different aspects of computer crime, published several books and articles, and been central in the drafting of criminal provisions concerning cybercrime to the new Norwegian Criminal Code which entered into force in 2015.
Dr. My T. Thai
… is a UF Research Foundation Professor at the Computer and Information Science and Engineering department and an Associate Director of the Warren B. Nelms Institute for the Connected World, University of Florida. Her current research interests are on scalable algorithms, big data analysis, cybersecurity, and optimization in network science and engineering, including communication networks, smart grids, social networks, and their interdependence. The results of her work have led to 6 books and 170+ articles, including IEEE MSN 2014 Best Paper Award, 2017 IEEE ICDM Best Papers Award, 2017 IEEE ICDCS Best Paper Nominee, and 2018 IEEE/ACM ASONAM Best Paper Runner up. Prof. Thai has engaged in many professional activities. She has been a TPC-chair for many IEEE conferences, has served as an associate editor for the Journal of Discrete Mathematics, IEEE Transactions on Parallel and Distributed Systems, IEEE Transactions on Network Science and Engineering, and a series editor of Springer Briefs in Optimization. She is a founding EiC of the Computational Social Networks journal and EiC of the Journal of Combinatorial Optimization (JOCO). She has received many research awards including a UF Provosts Excellence Award for Assistant Professors, UFRF Professorship Award, a Department of Defense (DoD) Young Investigator Award, and an NSF (National Science Foundation) CAREER Award.
Dr. Thomas Walmann
… has a background as an experimental physicist with a PhD in statistical physics. After finishing his PhD, he undertook cross-disciplinary research in the oil and gas industry, geology, biophysics, aluminum processing, as well as other fields in academia for 10 years. About 15 years ago, he joined the Norwegian police as head of digital forensics and ICT operations at ØKOKRIM – the economic and environmental crime agency in Norway. There he has participated in most operations and development of the evidence handling infrastructure for large criminal cases – the ridiculously large cases – with more than 100 million real documents.
Summer School Committee
The Programme Committee of Summer School 2019 was approved during the CA17124 Core Group Meeting, 1-2 February 2019, Madrid.
- Vassia Atanassova (WG7 ECI-Leader)
- Pedro Cabalar (WG3 Leader)
- Stefania Costantini (Action Vice-Chair)
- Katrin Franke (Norway MC member)
- Zeno Gerards (WG1 Vice-Leader)
- Szilvia Nagy (WG7 Vice-Leader)
- Raffaele Olivieri (WG1 Leader)
Local Organizing Committee
- Professor Katrin Franke
- Dr. Andrii Shalaginov
NTNU Digital Forensics Group (Testimon)
Norwegian University of Science and Technology (NTNU)