Time
8:00a - 8:15a
|
|
Activity
Rick Mislan
Purdue University
MFW Conference Director
|
|
Welcome to Mobile Forensics World 2009!
Rick Mislan, MFW Conference Director, welcomes you to the Second Annual Mobile Forensics World 2009 Conference!
After quickly welcoming the audience and pointing out this year's highlights, presenters, exhibitors,
and work being done at the Cyber Forensics Lab in Purdue University's Computer and Information Technology Department,
Rick introduces the MFW09 Keynote Speaker!!!
|
|
|
Location
Chicago D,E
|
|
8:15a - 9:30a
|
|
Keynote Speaker
Rick Voss
Supervisory Special Agent
Federal Bureau of Investigations
|
|
Mobile Forensics: The Path Forward
Despite an explosion of data and the proliferation of mobile devices, forensics examiners have made great strides in the forensic examination of mobile or portable devices.
Going forward, significant challenges exist for mobile forensics and digital evidence forensics.
The keynote address will explore these challenges, and take a look at how various agencies and organizations are positioning themselves to conduct mobile forensics in the future.
|
|
|
Chicago D,E
|
| |
|
9:30a - 10:00a
|
|
|
|
Salon 8,9,10
|
| |
|
9:30a - 6:00p
|
|
|
EXHIBIT HALL OPENS
|
|
All the Mobile Forensics World has to offer...All Day Long!
|
|
|
Salon 8,9,10
|
| |
|
12:00p - 1:00p
|
|
LUNCH
|
|
Nikko Room
|
| |
|
1:00p - 2:30p
|
|
Jonathan Zdziarski
McAfee, Inc.
|
|
Low Level iPhone Forensics
Since the iPhone's release, there has been significant forensic
interest in the device for use by law enforcement. While a number of
tools have become available to collect sync data from an iPhone, a
number of low-level techniques have also been documented. Jonathan
Zdziarski will demonstrate the kind of low-level data that can be
recovered from an iPhone using his book, iPhone Forensics. This
includes GPS map data, delete voicemail, email, and photos, WiFi
history, and hundreds of deleted screenshots the device takes on its
own. He'll also demonstrate bypassing the passcode on a device when
the suspect's desktop machine is not available.
|
|
|
Chicago D
|
|
|
|
Scott Inch
Bloomsburg University
|
|
Computer Forensics Techniques for the Mobile Examiner
As cell phones morph into handheld computers, the techniques used by mobile examiners will also change.
Those trained in traditional computer forensics will notice some interesting similarities between cell phones and computers.
This presentation will make mobile examiners aware of some of the important new evidentiary items that need to be explored on modern cell phones and how they relate to evidence found on computers.
|
|
|
Chicago E
|
|
|
|
Oleg Fedorov
Oxygen Software
|
|
Advanced Technics in Forensic Examination of Smartphones
A smartphone is actually the small computer that stores a lot of personal information which might be very important in forensic inquiries.
At the same time quite few information can be obtained from smartphones with a help of common PC-to-phone extraction protocols.
How to get the most of forensic data without using special and expensive hardware?
|
|
|
Chicago F
|
|
|
|
|
|
Chicago G
|
| |
|
2:30p - 3:00p
|
|
|
|
Chicago C
|
| |
|
3:00p - 4:30p
|
|
Shafik Punja
Calgary Police
|
|
Blackberry Forensics
This presentation is designed to make the analyst aware of the following issues regarding BlackBerry forensics:
. BlackBerry security mechanisms,
. How to process the device post - seizure,
. Digital evidence storage areas,
. What RIM can provide with lawful court orders
. What is a BES vs BIS
. What do I do when I encounter a BES?
. Did you know that the BlackBerry stores event logs? Do you know how
to extract them?
. Did you know that BlackBerry Messenger conversations are not stored
as record in the BlackBerry database structure and that an ipd extraction
will not obtain them? This presentation will demonstrate how to address
obtaining these conversations.
|
|
|
Chicago D
|
|
|
|
Rick Ayers
NIST
|
|
Mobile Device Forensics - Tool Testing
The goal of the Computer Forensic Tool Testing (CFTT) project at the National Institute of Standards and Technology (NIST) is to establish a methodology for testing computer forensic software tools.
The results provide information necessary for toolmakers to improve tools, for users to make informed choices about acquiring and using computer forensic tools, and for interested parties to understand the tools capabilities.
The presentation entitled "Mobile Device Forensics - Tool Testing" provides an overview of the CFTT methodology and a summary of testing performed on mobile forensic applications capable of acquiring the internal memory from GSM mobile devices and Subscriber Identity Modules (SIMs).
|
|
|
Chicago E
|
|
|
|
Jeff Hunt
Project-A-Phone
|
|
Rapid Manual Examinations Using Project-a-Phone Capture and Reporting Software
This session covers techniques for using the Project-a-Phone Image Capture and Display systems and Case Reporting software to capture screen shots and video files, record information about the case and phone, add notes, and combine everything into a pdf, rtf or html report.
|
|
|
Chicago F
|
|
|
|
Brent Bailey
Cellular Data Resources
|
|
The ABC's of CDR's
Call Detail Records, or CDR's, are the non-voice records of each call that a cellular phone makes.
These records can be a valuable source of evidence if you know how to read an interpret them.
Using a sample set of CDR's, we will demonstrate analysis techniques to aid investigators who use CDR's in their investigations.
|
|
|
Chicago G
|
| |
|
4:30p - 6:00p
|
|
|
|
Chicago D,E
|
| |
|
6:00p - ?
|
|
On Your Own...or maybe someone will want to Sponsor a Dinner Out...
|
|
Chicago, IL
|
| |
Conference Schedules
