Issues 2002:
Computer Forensics
Collecting, Examining, Preserving, and Acting

ACM Special Interest Workshop

Chair: Dr. Harvey H. Rubinovitz

Tuesday, 10 December 2002, 8:30 a.m. - 4:30 p.m.

Cost: Free for Registered Attendees

ACSAC is pleased to once again host a Workshop of the ACM's Special Interest Group on Security, Audit, and Control (SIGSAC). Previous ACSAC attendees have agreed that these workshops provide a useful and exciting forum for information technology professionals – for example, standards developers, software developers, security engineers, security officers – to exchange ideas, concerns, and opinions.

In recent years, the number of computer-related crimes has increased. Even if the crime itself has not taken place on the computer, the computer may contain evidence about a crime that has occurred or is about to occur. As the number of people using computers has increased, so has the number of criminals using computer and computer networks. Unfortunately, few investigators are well trained in identifying, investigating, capturing, analyzing, preserving, and processing computer-based evidence.

The security community has taken a great interest in computer forensics technology as the amount of criminal activity has increased in 'cyberspace'. The increasing challenge for investigators is that a physical presence is no longer needed when committing criminal acts nor may there be any physical evidence as there is in a conventional crime. Computer forensics is viewed by the security community as a method of examining, preserving, and acting on computer and network evidence. A number of tools have been developed and are being utilized today.

This year's SIGSAC Workshop will focus on the relationship between computer forensics and security, how the technology is being utilized to obtain meaningful information from data obtained from computer and computer networks today, and the need to facilitate the research and development of a new generation of computer forensic tools and procedures. Forensics data must be located, collected, and analyzed properly. The emphasis will be placed on the information-gathering process and the tools used to collect and analyze forensics data – with any remaining time used to discuss future trends in forensics along with issues from the legal communities.

Given wide interest today in digital forensics, this Workshop provides an excellent opportunity to learn about the field of computer forensics and standards developers' concerns about the topic, and to express your concerns and/or opinions. Send your presentation or discussion proposals to Harvey Rubinovitz, Workshop Chairman (contact information below).

Although there is no charge for attending the workshop, pre-registration is requested. To do so, use the Registration Form or contact Harvey H. Rubinovitz, Workshop Chairman, directly by mail at The MITRE Corporation, M/S S145, 202 Burlington Road, Bedford, MA 01730; by telephone at (781) 271-3076; or by electronic mail at

Please note that registration for this Workshop does not include registration for any ACSAC sessions. Workshop participants can continue their discussions at the ACSAC Tutorial lunch for $25.00. See the Registration Form for details.