180 likes | 490 Views
State of Multimedia Forensics. Fabio R. Auffant II. Presenter’s Experience. Retired law enforcement (New York State Police) Over 27 years Law Enforcement experience Over 13 years cyber crime & digital forensics experience
E N D
State of Multimedia Forensics Fabio R. Auffant II IC4MF Presentation - November 2013
Presenter’s Experience • Retired law enforcement (New York State Police) • Over 27 years Law Enforcement experience • Over 13 years cyber crime & digital forensics experience • Lieutenant/Operations Manager of a Computer Forensic Laboratory and 9 regional digital forensics labs in NY State. • Quality Control Manager for field and laboratory digital forensics operations • Qualified Technical Assessor in Digital & Multimedia forensics (ISO 17025) • Certified Instructor in cyber crime & digital forensics for law enforcement • Certified Digital Forensics Examiner & experienced Court Expert Witness • Academics • Completed over 800 classroom hours of Digital Forensics training • Achieved and maintained several Digital Forensics certifications • BS in Organizational Management • MS in Digital Forensics Management • Academic Instructor – Columbia Greene Community College • Academic Instructor - State University of New York @ Albany • Current • Private Consultant (DBA: Second Wave Associates) • NY State Licensed & Bonded Private Investigator • Member of several professional organizations: IACIS, HTCIA, HTCC, and InfraGard IC4MF Presentation - November 2013
21st Century Challenges • Improving the Digital & Multimedia Forensics global community • Improving the Digital & Multimedia Forensics profession • Improving private and public sector global partnerships • Improving knowledge-sharing amongst academia and digital forensics practitioners • Developing academic research relevant to digital forensics work environments with “real” deliverables to its practitioners • Improving interaction between students and practitioners leading to meaningful mentorships • Fostering international cooperation amongst digital & multimedia forensic practitioners to improve best practices • Promoting global resource sharing amongst digital & multimedia forensic practitioners, partners and academia IC4MF Presentation - November 2013
“Real” Challenges • You cannot demand that every forensic operation, in every country, state or jurisdiction be ISO 17025 and ASCLD/LAB accredited. • You cannot ignore the fact that forensic operations without any standardization protocols will lead to possible quality control mistakes and/or legal obstacles. • You cannot train every individual that will handle digital and multimedia evidence in advanced techniques or tools. • Most often every item of digital evidence cannot be submitted to a central location for examination. • Most academic research does not provide work-related “deliverables” to forensic practitioners. • Financial & Research resources are very limited or not available to digital & multimedia forensic practitioners. IC4MF Presentation - November 2013
Divided Approach • Some in the forensic community believe in having full accreditation of all multimedia forensics techniques, tools, quality control and personnel qualifications. • Others in the forensic community believe no standards are necessary; less is better. • Single set of forensic standards are not applicable to all practitioners, because: • Legal standards are different in each country. • Training standards differ for each government agency and corporation based on their mission and priorities. • Somewhere in the middle exists a globally-accepted approach to Digital & Multimedia Forensics that is legally and forensically sound. IC4MF Presentation - November 2013
Multi-layered Approach Multi-layered approach may be necessary to assist in the continuing maturity of digital and multimedia forensics in the 21st century. • Development of internationally-recommended digital and multimedia forensics best practices that provide a roadmap for practitioners, and supporting entities. • Academic curriculum that properly prepares 21st century cadre of multimedia forensic practitioners. • Academic research that produces multimedia forensics findings that may be operationally feasible rather than just hypothetical. IC4MF Presentation - November 2013
Multi-layered Approach – Cont’d • Workgroups comprised of subject matter experts, such as forensic and quality control practitioners, and educators, to research, develop and disseminate international best practices. • Internationally-recognized corporate partners that provide technological, financial, academic and training support for digital & multimedia forensics. • Qualified legal advisers that continuously seek acceptance of best practices in the legal community and encourages changes to laws, statutes and regulations in support of forensics. IC4MF Presentation - November 2013
Current Endeavors • State University of New York is comprised of 64 campuses; none have a BS degree in Digital Forensics. • Implementation of 4 year B.S. degree program in Digital Forensics at the State University of New York at Albany. • Program falls under the UAlbany School of Business, Information Technology Management division. • Partnership with corporations engaged in auditing, accounting and other fields interested in Digital Forensics graduates. • Partnership with government through workgroup participation providing a pipeline for internships. IC4MF Presentation - November 2013
BS in Digital Forensics • Partnership with 6 community colleges that offer 2 year degrees in this field in order to establish pipeline of students into the BS program. • Acceptance into the program may be through a 2+2 transfer agreement, joint acceptance, or direct acceptance into UAlbany. • Program GPA requirements of 3.25 to ensure commitment and development of motivated students. • Courses to be delivered through traditional & virtual classrooms and hybrid of both to ensure participation by local, national and international students. IC4MF Presentation - November 2013
BS in Digital Forensics – Cont’d • BS program includes the following core courses: • 200 level • Intro to Digital Forensics • Cyber Crime Investigations • 300 level • Computer Forensics 1 • Computer Forensics 2 • Network & Mobile Device Forensics • eDiscovery Forensics • 400 level • Advanced Digital Forensics • Digital Forensics Moot Court IC4MF Presentation - November 2013
Student Participation • BS degree requires many elective credits in the Criminal Justice, Business and Computer Science fields to expose student to multi-facets of Digital & Multimedia Forensics. • BS degree will incorporate proficiency testing, lab analysis reporting and industry certifications to supplement course studies. • Level 300 and 400 courses will incorporate student course projects in the curriculum, that will include short-term research in industry laws, technologies, methodology and tools in the investigation of cyber crime and digital & multimedia forensics. • Students will be encouraged to participate in professional organizations, such as the International Association of Computer Investigative Specialists (IACIS), High Technology Crime Investigation Association (HTCIA) and High Tech Crime Consortium (HTCC). IC4MF Presentation - November 2013
Contact Information Fabio R. Auffant II Consultant SecondWaveAssociates@gmail.com 1-518-755-0471 Academic Lecturer fauffant@albany.edu 1-518-956-8341 IC4MF Presentation - November 2013