The Westin Hotel
San Francisco, CA, USA
Friday May 24, 2013

Today's world's societies are becoming more and more dependent on open networks such as the Internet - where commercial activities, business transactions and government services are realized. This has led to the fast development of new cyber threats and numerous information security issues which are exploited by cyber criminals. The inability to provide trusted secure services in contemporary computer network technologies has a tremendous socio-economic impact on global enterprises as well as individuals.

Moreover, the frequently occurring international frauds impose the necessity to conduct the investigation of facts spanning across multiple international borders. Such examination is often subject to different jurisdictions and legal systems. A good illustration of the above being the Internet, which has made it easier to perpetrate traditional crimes. It has acted as an alternate avenue for the criminals to conduct their activities, and launch attacks with relative anonymity. The increased complexity of the communications and the networking infrastructure is making investigation of the crimes difficult. Traces of illegal digital activities are often buried in large volumes of data, which are hard to inspect with the aim of detecting offences and collecting evidence. Nowadays, the digital crime scene functions like any other network, with dedicated administrators functioning as the first responders.

This poses new challenges for law enforcement policies and forces the computer societies to utilize digital forensics to combat the increasing number of cybercrimes. Forensic professionals must be fully prepared in order to be able to provide court admissible evidence. To make these goals achievable, forensic techniques should keep pace with new technologies.

The aim of this workshop is to bring together the research accomplishments provided by the researchers from academia and the industry. The other goal is to show the latest research results in the field of digital forensics and to present the development of tools and techniques which assist the investigation process of potentially illegal cyber activity. We encourage prospective authors to submit related distinguished research papers on the subject of both: theoretical approaches and practical case reviews.

The workshop will be accessible to both non-experts interested in learning about this area and experts interesting in hearing about new research and approaches.

Topics of interest include, but are not limited to:

• Cyber crimes: evolution, new trends and detection
• Cyber crime related investigations
• Computer and network forensics
• Digital forensics tools and applications
• Digital forensics case studies and best practices
• Privacy issues in digital forensics
• Network traffic analysis, traceback and attribution
• Incident response, investigation and evidence handling
• Integrity of digital evidence and live investigations
• Identification, authentication and collection of digital evidence
• Anti-forensic techniques and methods
• Watermarking and intellectual property theft
• Social networking forensics
• Steganography/steganalysis and covert/subliminal channels
• Network anomalies detection
• Novel applications of information hiding in networks
• Political and business issues related to digital forensics and anti-forensic techniques

Authors are invited to submit Regular Papers (maximum 8 pages) or Short Papers (maximum 4 pages) via EasyChair. Papers accepted by the workshop will be published in the Conference Proceedings published by IEEE Computer Society Press.

Papers must be formatted for US letter (not A4) size paper with margins of at least 3/4 inch on all sides. The text must be formatted in a two-column layout, with columns no more than 9 in. high and 3.375 in. wide. The text must be in Times font, 10-point or larger, with 12-point or larger line spacing. Authors are encouraged to use the IEEE conference proceedings templates found here. Failure to adhere to the page limit and formatting requirements will be grounds for rejection.

The following is a URL link to the "Author's Final Paper Formatting and Submission Instructions" Webpage (Online Author Kit) for 2013 IEEE Security and Privacy Workshops (SPW 2013).

The extended versions of high-quality papers selected from the workshop will be published in a special issue of the EURASIP Journal on Information Security (confirmed).

February 15, 2013 (EXTENDED): Regular & Short Paper Submission
March 11, 2013: (EXTENDED): Notification Date
April 1, 2013: Camera-Ready & Early Registration Deadline (REGISTRATION IS OPEN !)

(5) StegTorrent: a Steganographic Method for P2P Files Sharing Service
(6) Do Private and Portable Web Browsers Leave Incriminating Evidence?
(8) Preventing Cell Phone Intrusion and Theft using Biometrics
(10) On Evaluating IP Traceback Schemes: A Practical Perspective
(11) Understanding Network Forensics Analysis in an Operational Environment
(13) Quantitative assessment of risk reduction with cybercrime black market monitoring
(15) Digital Forensic Reconstruction of A Program Actions
(17) Inside the SCAM Jungle: A Closer Look at 419 Scam Email Operations
(20) Craigslist Scams and Community Composition: Investigating Online Fraud Victimization
(22) Steganography in OFDM Symbols of Fast IEEE 802.11n Networks

8:00 - 9:00 - Breakfast

9:00 - 9:15 - Welcome & Opening Remarks

9:15 - 10:00 - Invited paper: Nicolas Courtois, Daniel Hulme, Jerzy Gawinecki, Kumail Hussain and Marek Grajek - On Bad Randomness And Cloning of Contactless Payment and Building Smart Cards

10:00 - 10:35 - Coffee break

10:35 - 12:15 (25 minutes for each presentation) - Session I - Digital Forensics
E. Raftopoulos, X. Dimitropoulos - Understanding Network Forensics Analysis in an Operational Environment
A. F.Shosha, L. Tobin, P. Gladyshev - Digital Forensic Reconstruction of A Program Actions
V. Garg and S. Nilizadeh - Craigslist Scams and Community Composition: Investigating Online Fraud Victimization
V. A. Foroushani, N. Zincir-Heywood - On Evaluating IP Traceback Schemes: A Practical Perspective

12:15 - 1:30 - Lunch

1:30 - 3:15 Session II - Cyber Crimes Techniques (25 minutes for each presentation)
D. Ohana, N. Shashidhar - Do Private and Portable Web Browsers Leave Incriminating Evidence?
J. Isacenkova, O. Thonnard, A. Costin, D. Balzarotti, A. Francillon - Inside the SCAM Jungle: A Closer Look at 419 Scam Email Operation
P. Kopiczko, W. Mazurczyk, K. Szczypiorski - StegTorrent: a Steganographic Method for P2P Files Sharing Service
S. Grabski, K. Szczypiorski - Steganography in OFDM Symbols of Fast IEEE 802.11n Networks

3:15 - 3:45 - Coffee break

3:45 - 4:45 Session III - Cyber Crimes Prevention & Monitoring (25 minutes for each presentation)
L. Allodi, W. Shim, F. Massacci - Quantitative assessment of risk reduction with cybercrime black market monitoring
D. Ohana, L. Phillips, L. Chen - Preventing Cell Phone Intrusion and Theft using Biometrics

4:45 - 5:00 - Closing & Best Paper Award

Krzysztof Szczypiorski, Warsaw University of Technology, Poland
Wojciech Mazurczyk, Warsaw University of Technology, Poland
Yali Liu, AT&T Labs, USA
Hui Tian, National Huaqiao University, China

Patrizio Campisi, University of ROMA TRE, Italy
Pedro Comesana, Universidad de Vigo, Spain
Costas Constantinou, University of Birmingham, UK
Nicolas T. Courtois, University College London, UK
Frederic Cuppens, TELECOM Bretagne, France
Jana Dittmann, Uni Magdeburg, Germany
Zeno Geradts, Netherlands Forensic Institute, Netherlands
Anthony Ho, University of Surrey, UK
Chad Heitzenrater, DoD, USA
Lech Janczewski, University of Auckland, New Zealand
Stefan Katzenbeisser, Technische Universitat Darmstadt, Germany
Piotr Kijewski, NASK, Poland
Jerzy Konorski, Gdansk University of Technology, Poland
Igor Kotenko, SPIIRAS, Russia
Zbigniew Kotulski, Warsaw University of Technology and IPPT PAN, Poland
Christian Kraetzer, Otto-von-Guericke University of Magdeburg, Germany
Miroslaw Kutylowski, Wroclaw University of Technology, Poland
Shujun Li, University of Surrey, UK
Shiguo Lian, Huawei, China
Ke Liao, IACAS, China
Guangjie Liu, Nanjing University of Science and Technology, China
Josef Pieprzyk, Macquarie University, Australia
Alessandro Piva, University of Florence, Italy
Ashley Podhradsky, Drexel University, USA
Michalis Polychronakis, Columbia University, USA
Pedro Prospero-Sanchez, Science and Technology University of Sao Paulo, Brazil
Johnson Thomas, Oklahoma State University, USA
George Weir, University of Strathclyde, UK
Jozef Wozniak, Gdansk University of Technology, Poland
Sebastian Zander, Swinburne University of Technology Melbourne, Australia

Krzysztof Szczypiorski, ksz@tele.pw.edu.pl
Wojciech Mazurczyk, wmazurczyk@tele.pw.edu.pl

GOLD

SILVER