Open Memory Forensics Workshop 2014
Volatile memory forensics (ie., RAM forensics) has proven one of the most exciting and important topics to the future of digital investigations. It has dramatically transformed the way we perform digital investigations and helped provide a path for addressing many of the challenges currently facing the digital forensics community.
OMFW is the only digital forensics workshop focused on providing a venue for the most advanced digital investigators. It is intended for those people who realize that the only real defense against a creative technical human adversary is a creative technical human analyst. No shady vendors trying to describe how they re-implemented open source tools or boisterous trainers attempting to discuss topics they only superficially understand. This is your opportunity to learn directly from an international cadre of pioneering researchers and practitioners who have been shaping the field of memory analysis since its inception. Through a series of invited talks you will have the opportunity to engage this exciting community.
Join with industry leaders to discuss the latest advancements in memory forensics and the importance of open source initiatives. This is your opportunity to help shape the future of memory forensics!
We are still accepting presentations from people who are performing innovative memory analysis research or from people who have interesting case studies where memory forensics provided a critical component of the investigation. If you are interested in participating, please contact us. Submissions are due no later than October 1, 2014.
This year's workshop will also present the results of The 2nd Annual Volatility Framework Plugin Contest! If you are interested in presenting at the conference, submitting a contest entry is another option. Selected contestants may be asked to present their work at the workshop and have it featured on the Volatility Labs Blog. All contest submissions are due by September 1, 2014.
This half-day workshop will be held prior to the 2014 Open Source Digital Forensics Conference (OSDFC) in Herndon, VA, USA, on November 4, 2014. Details about the location will be provided upon registration. Pre-registration is required and space is limited, so register early. Please note that it will NOT be possible to register at the door.
Date: Tuesday, November 4, 2014
Location: Herndon, VA
Sponsors: The Order of Volatility (OOV), The Volatility Foundation
Similar to previous years, there will be a $50 registration donation. 100% of the proceeds are donated to charity. Previously, all workshop proceeds were donated to the National Center for Missing & Exploited Children.
Special registration consideration will be given to those who are active contributors to open source forensics tools. You can contact us to reserve your seat.
"After a jam-packed series of technical talks given at the rate of a machine gun, the only emotion I could come to was... humbled. Here are the folks who are utterly conquering a new battlefield of forensics." Brian Baskin (http://www.ghettoforensics.com/2014/01/a-ghettoforensics-look-back-on-2013.html)
"What's really great about OMFW is that not only does Aaron get some of the big names that are really working hard (thanks to them!) to push the envelope in this area of study to present, but there are also a lot of great talks in a very short time period." Harlan Carvey (http://windowsir.blogspot.com/2013/11/conferences.html)
"The OMFW was well… mind blowing for the most part. The amount of knowledge the Volatility guys (and girl) have is insane." Glenn P. Edwards Jr. (http://blog.opensecurityresearch.com/2012/10/omfw-and-osdfc-recap.html)
"For the last four years the Open Source Memory Forensics Workshop (OMFW) has hosted a collective who’s who of memory forensics and provided a forum in which to discuss the latest advances and tools." Mike Webber (http://www.bitsecglobalforensics.com/news/open-memory-forensics-workshop-2012-omfw2012/)
"AAron was able to bring together an outstanding group of folks interested in "memory forensics" and there was some spirited discussion among the participants along with some really outstanding talks/demos. It was also great to be able to put faces to folks who until then had only been handles in IRC or names on e-mail/blog posts in the past." Jim Clausing
"My first impression of the event was that the underground could have set digital forensics back 3-5 years if they had attacked our small conference room. Where else do you have Eoghan Casey, Brian Carrier, Harlan Carvey, Michael Cohen, Brendan Dolan-Gavitt, George Garner Jr., Andreas Schuster, Aaron Walters, et al, in the same room? I thought Brian Dykstra framed the situation properly when asking the following: "I know this is an easy question for all you 'beautiful minds,' but..."" Richard Bejtlich
What Makes OMFW Different?
Conference Size: OMFW is intended to be an intimate venue to encourage participation and collaborative discussions. Thus, we limit the number of attendees in order to have the highest speaker to participant ratio of any security conference.
Technical Content: OMFW is the most technical conference you will attend in the area of digital forensics. While I know some organizations believe that forensic content should be dumbed down to make it more accessible to the general public, we believe the only way to grow as an industry is to push people beyond what they are comfortable with. The goal is to help people develop the skills required to deal with the modern digital adversary.
Peer Relationships: Another major goal of OMFW is to help attendees build relationships with the people actually doing the innovative research in the area of memory analysis. These are the people you will turn to when you are facing a challenging problem or when you need to bounce an idea off of someone. They are the developers who actually did the research and built the tools.
Expert Researchers and Practitioners: OMFW is intended to bring together both practitioners and researchers. It is an opportunity to learn what innovative research is being done in memory analysis and what current challenges investigators are facing. In fact, many of the speakers were chosen for their unique ability to combine real world experience and innovative research.
Cost: Unlike many forensics conferences or memory analysis trainings which are overpriced money making schemes, the goal of OMFW is to further the memory forensics community. Given the limited number of attendees, we have decided to collect a $50 donation to discourage people from registering and not showing up. 100% of the proceeds collected are donated to charity!
Lightening Talks: Unlike most conferences with drawn out presentations, OMFW asks invited speakers to present talks that are focused and full of great information. Thus, presentations are limited to 30 minutes. At the end of each talk, time is set aside to engage each speaker about specific details of their presentation.
No Commercial Exploiters: In recent years, there has been a growing number of shady vendors entering the digital forensics/incident response industry. If you currently work for one of these vendors or have in the past, we request that you do not attempt to attend. Your business practices have already negatively affected the openness and sharing of the digital forensics community. You know who you are!