DataFocus 2013

8:50 -10:30

Keynote presentations Training of prosecutors in the UK

Esther is a Senior Policy Adviser and prosecutor based at the Crown Prosecution Service (CPS) HQ Strategy and Policy Directorate, London. Esther specializes in internet and computer-enabled crime, digital evidence, intellectual property theft and data protection. In January 2002 Esther became the project manager for the CPS High-Tec Crime Project. Esther has advised prosecutors at all levels within HQ and Area CPS offices, police, and other Government bodies. Esther presently acts as a consultant to other prosecutors in high-tec crime cases. She developed and designed the CPS national high-tec crime training course for prosecutors and as a result, the CPS has a trained cadre Of high-tec crime specialists. Esther regularly speaks on high-tec crime issues at conferences and training sessions nationally and internationally. In 2010 Esther received a Certificate of Merit award from the International Association of Prosecutors for initiating and developing the Global Prosecutors E-Crime Network (GPEN) which is an on-line information sharing network to help solve high-tec crime around the world.

Keynote presentation: Importance of Digital Evidence in Criminal Procedure

He graduated from the Faculty of Law, University of Zagreb, in 1984. Mr. Tripalo was appointed the Judge of the Supreme Court of the Republic of Croatia in 2004. He was appointed the Judge of the County Court in Zagreb in 1996, where he served as the President of the First Instance Criminal Law Department from 1998 to 2004. He began his career as the Judge of the Municipal Court in Zagreb in 1998 and worked as a military court judge for three years, from 1993 to 1996.

8:50 - 10:30

Keynote presentation: International Criminal Justice Cooperation in Information Society

Zlata Đurđević is a full professor at the Faculty of Law, University of Zagreb, where she held the Chair of the Department of Criminal Law since 2007. She completed her PhD with the thesis “Criminal Law Protection of the European Union Financial Interests” at the Faculty of Law in Zagreb, in 2003. She passed the state bar exam in December 1994, upon completing a judicial internship at the County Court in Zagreb. Special areas of her interest include criminal procedural law, European Union criminal law, human rights and mental health law. She is fluent in English and German and has a passive command of French. She was awarded several international academic grants, including the German DAAD Grant, the Austrian OeAD Grant, and the Fulbright Scholarship. She is the Vice President of the Croatian Association of European Criminal Law, a member of the Managing Board of the Croatian Association for Criminal Law Sciences and Practice (www.pravo.hr/hukzp) and the European Criminal Law Academic Network Contact Point for Croatia (ECLAN, www.eclan.eu). She is a member of the Croatian State’s Attorney Council and of the Asylum Commission of the Republic of Croatia. Currently, she is the project manager of five scientific research projects. She has been a member of the Executive Committee of the International Association of Penal Law (AIDP, www.penal.org) since 2009. She spent the 2009/2010 academic year as a guest lecturer at the University of California, Berkeley, USA. She spoke at over thirty symposiums and conferences in Croatia and abroad, as well as published five books and over thirty scientific papers in Croatian and foreign publications.

8:50 - 10:30

Keynote presentation: Croatian Criminal Law and the Challenge of Cybercrime

Prof. Davor Derenčinović, PhD, was born in Zagreb, on 7 August 1970. He graduated from the Faculty of Law in Zagreb in 1995 and gained a master’s degree from the same Faculty in 1998. He completed his PhD by the thesis “Corruption in Criminal Law” in 2000. Since 2010, he has been the Chair of the Department of Criminal Law at the Faculty of Law, University of Zagreb. He completed his postgraduate studies at the International Human Rights Law Institute, DePaul College of Law, Chicago, as the recipient of the 2004 – 2005 Fulbright Scholarship. In addition, he completed professional development programs at the Institute Superiore Internazionale di Scienze Criminali in Syracuse, at the Academy of European Law in Trier and at the London School of Economics. He is the founder and the director of the international course “Crime Prevention through Criminal Law and Security Studies” offered to postgraduate students at the Inter-University Centre in Dubrovnik. So far he has published about a dozen books and more than fifty scientific and professional papers in the field of criminal law and protection of human rights, as both author and co-author. In addition to his position at the Faculty of Law in Zagreb, he is a lecturer in a number of graduate and postgraduate (specialist and doctoral) studies in Croatia and abroad. As a member of several working groups at competent ministries, he participated in drafting and amending a large number of criminal laws. He was a contributor to a number of Croatian and international scientific projects and the manager of the “Criminal Law in Prevention of Corruption and Organised Crime” project funded by the Croatian Ministry of Science and Education. He is a member of working groups for the preparation of negotiations on Chapter 23 and Chapter 24 of the European Union acquis communautaire. He was appointed an expert advisor by the United Nations Office for Drugs and Crime (UNODC) and ad hoc judge by the European Court of Human Rights. Until 2005 he was a member of the Council of Europe Committee of Experts on Terrorism (CODEXTER). He is the Vice President of the Group of Independent Experts for the Implementation of the Council of Europe Convention on Action against Trafficking in Human Beings (GRETA), the President of the Croatian Association of Criminal Sciences and Practice, one of the founding members and the Secretary of the Croatian Academy of Legal Sciences, an Editor-in-Chief of the Croatian Academy of Legal Sciences Yearbook, a member of the Court of Honour of the Zagreb Society of University Teachers, Scholars and Other Scientists, a member of the Croatian Parliament Legislation Committee and the Vice President of the Croatian State’s Attorney Council. He was awarded the Croatian Homeland War Memorial Medal.

12:15 - 12:45

Encrypted Content Forensics

The inflation of cryptographic solutions, especially full disk encryption (FDE), greatly complicates (if not completely undermines) the daily work of digital forensics experts. One of the paradigms of digital evidence examination is that digital evidence must be preserved unchanged and thus remain viable for further expert analysis and examination. Unfortunately, in cases where FDE solutions are applied to systems, such limitation represents an insurmountable barrier to analysis and examination in the majority of cases. If we draw a parallel with cases from “classic forensics” where, for example, in order to exclude a DNA sample or a fingerprint from the crime scene one cannot avoid affecting the evidence and the crime scene themselves, the question arises as to why this would be different in digital forensics. The most common obstacle in the examination of encrypted digital evidence is that, in order for an examination to be possible at all, certain procedures must be carried out the very moment the police or other law enforcement officers seize hardware. New cloud technologies and solutions show a lot of promise in this area, especially for brute-force attacks.

Lecturer:

Damir Palavra

Permanent Court Expert Witness, Croatia

Damir Palavra is an independent forensic investigator and court-appointed expert in the field of computer science, electronics and telecommunications. He graduated from the Faculty of Electrical Engineering and Computing in Zagreb in 2002 and obtained a Master’s degree. He was appointed as a permanent court expert in the field of Informatics in 2013. In the last 15 years, Damir has been working intensively in the field of digital security, computer forensics, and consulting in IT technologies.

15:00 - 15:30

ISO 27037 – Guidelines for Identification, Collection, Acquisition and Preservation of Digital Evidence

The collection and storage of digital evidence is a critical phase of the forensic procedure which precedes analysis and taking of evidence. The improper and inadequate handling of data, that are the basis for further procedures, reduces the credibility of the whole procedure, thereby calling into question the accuracy of final conclusion in legal proceedings. The International Standard ISO/IEC 27037 is the first document of importance that describes the process of identification, collection, acquisition and preservation of digital evidence in computer-oriented criminal offenses. It guides various individuals participating in this process – from law enforcement agents and court experts to response specialists who must promptly react to an incident. The presentation will introduce the process of collecting and storing digital evidence as prescribed by ISO/ IEC 27037, with a special emphasis on the description of proposed measures. In addition, we will discuss the best applications of ISO/IEC 27037 in practice.

Lecturer:

Damir Paladin

MSc, Permanent Court Expert Witness, Croatia

Damir Paladin is an Information Security Consultant. He has been professionally engaged in information technology for over 25 years. In 1998 he founded his own company, Borea, which he manages to this day. His area of expertise includes computer forensics, as well as auditing and testing the security of information systems. He is the holder of CISSP, CISA and CISM professional security certifications. In addition to being a permanent court expert witness in IT, he regularly collaborates with some of the most important Croatian companies and institutions providing expert services in the area of information security.