Status Quo Workshop

20 - 21 October 2015

Summary

A Status Quo Workshop took place on 20-21 October 2015 in Sofia, Bulgaria. During the event, the workshop participants were presented the outcomes of the EVIDENCE project within the fields of electronic evidence regulation, the processes of collection, preservation, analysis and exchange of electronic evidence by law enforcement agencies and its presentation before courts, as well as related standard and data protection issues.

Project partners and experts from EUROJUST, National Criminal Investigation Service of Norway, Netherlands Forensic Institute, University of Burgundy, MITRE Corporation, and Bulgarian law enforcement agencies and courts took part in several panel discussions dedicated to

  • better regulating electronic evidence;
  • standards and formalisms to represent digital forensic information incl. representing data and metadata in evidence exchange, processing and investigating high volumes of seized digital data and developing a proper ontology to represent any digital events; and
  • challenges, best practices and lessons learnt from a prosecutor and cybercrime investigator’s perspectives on electronic evidence and related issues.

Within the second day of the workshop a special session was organized on the future EVIDENCE Road Map towards a Common European Framework for the application of new technologies in the collection, use and exchange of evidence framing the focus of the strategic document and the main points to be considered. The participants were divided into restricted groups where each group was composed by people with different competencies. At the end of the session each group rapporteur explained in detail the issues his/her group showing the points of the group, then the first X points to be selected and further introduced in details in the EVIDENCE Road Map.

The workshop concluded with a short presentation on the way forward with the EVIDENCE Road Map summarizing the workshop observations and concluding remarks.

Detailed presentation of the Workshop could be found in our Deliverables Section within WP11 Outcomes.

Photos of the event could be found in ‘The Gallery’ Section of the EVIDENCE website at 'Status Quo Workshop on Results on WP3, WP4, WP6 and WP8' Folder.

Top

Agenda

Tuesday, 20 October 2015

08:30 – 09:00Registration and Welcome
09:00 – 09:30

Opening Session

Maria Angela Biasiotti, CNR-ITTIG, Italy, Coordinator of the EVIDENCE Project

 Session I. Legal Issues

Chair: Joseph A. Cannataci, University of Groningen, The Netherlands

09:30 – 10:45

Regulating Electronic Evidence: Current Frameworks and Primary Challenges

Jeanne Mifsud Bonnici/ Melania Tudorica, University of Groningen, The Netherlands

10:45 – 11:15Coffee Break
11:15 – 13:00

Panel Reflections on Regulating Electronic Evidence

Leif Gorts, EUROJUST

Joseph A. Cannataci, University of Groningen, The Netherlands

Eirik Tronnes Hansen, National Criminal Investigation Service, Norway
13:00 – 14:00Lunch
 

Session II. Standard Issues

Chair: Fabrizio Turchi / Mattia Epifani, CNR-ITTIG, Italy

14:00 – 14:30

Standard for Electronic Evidence Exchange across EU Members States

Fabrizio Turchi / Mattia Epifani, CNR-ITTIG, Italy

Standard proposal for representing data and metadata in Evidence Exchange
14:30 – 15:00

Standard for Processing High Volumes of Data

Erwin J. van Eijk, Netherlands Forensic Institute, The Netherlands

HANSKEN: A standard for processing and investigating high volumes of seized digital data
15:00 – 15:30

Standard for representing events in Digital Forensics Environment

Aurélie Bertaux, CheckSem Team, Laboratoire Le2i, University of Burgundy, France ORD2I: An ontology to represent any digital events
15:30 – 16:00Coffee Break
16:00 – 18:00

Standard and Formalisms to Represent Digital Forensic Information

General Discussion on Topics Proposed by EVIDENCE WP4 Leader

incl. S. Barnum / E. Casey, MITRE Corporation, USA (in web conference)
20:00Social Dinner

Wednesday, 21 October 2015

08:30 – 09:00Registration
 

Session III. Law Enforcement Issues

Chair: Christian Hawellek, Leibniz Universität Hannover, Germany

09:00 – 09:45

Status Quo on the Collection, Preservation, Analysis, Exchange of Electronic Evidence and Its Presentation before Courts: Challenges, Best Practices and Lessons Learnt

Sabine Berghs, INTERPOL
09:45 – 10:45

Challenges, Best Practices and Lessons Learnt from a Prosecutor’s Perspective

Eirik Tronnes Hansen, National Criminal Investigation Service, Norway
10:45 – 11:15Coffee Break
11:15 – 12:00

Challenges, Best Practices and Lessons Learnt from a Cybercrime Investigator’s Perspective

Yves Vandermeer, Federal Police – Federal Computer Crime Unit, Belgium
12:00 – 12:15General Discussion on Law Enforcement Issues
 

Session IV. Data Protection Issues

Chair: Christian Hawellek, Leibnitz University Hannover, Germany
12:15 – 13:00

Data Protection Issues in Gathering, Sharing and Exchanging of Electronic Evidence

Friederike Knoke, Leibniz Universität Hannover, Germany

Followed by General Discussion on Data Protection Issues
13:00 – 14:00Lunch
 

Session V. Group Discussions

Chair: Joseph A. Cannataci, University of Groningen, The Netherlands
14:00 - 14:15

EVIDENCE Road Map: Framing the Focus

Introduction to the EVIDENCE Road Map and afternoon session
14:15 - 15:15

EVIDENCE Road Map: Main Points to Be Considered

Discussion in restricted groups, each group will be composed by people with different competencies
15:15 - 15:45Coffee Break
15:45 - 16:15

EVIDENCE Report on Road Map Main Points

Each group rapporteur explains in detail the issues his/her group shows the points of his/her group, then the first X points will be selected
16:15 - 17:00EVIDENCE Road Map: Further Action
17:00 - 18:00Final Observations and Concluding Remarks

Top

Venue & Accomodation

The Status Quo Workshop is held in the Conference Room of Sense Hotel, Sofia, Bulgaria.

Sense Hotel is nestled in the heart of the city and has a matchless location on Sofia's main boulevard Tsar Osvoboditel, a street that is home to some of Bulgaria's most important buildings, including the country's National Assembly.

Address: 16 Tsar Osvoboditel Blvd., Sofia 1000, Bulgaria

Website: http://sensehotel.com/

Top

Registration

Registration process is now closed.