MFW 08
   HOME WELCOME MAILING LIST MAPS TRAINING CONTACTS
   REGISTRATION SCHEDULE SPEAKERS WORKSHOPS CALL FOR PAPERS
   ADVERTISING EXHIBITORS SPONSORS TRAVEL DOCUMENTS LOGOS
Purdue University
College of Technology
Cyber Forensics Lab
Welcome to MFW08 from
Conference Director,
Rick Mislan
Event News:

MFW08 Conference Evaluation!

MFW08 Pics from Oyvind!

Saturday Keynote Speaker:
Kathleen Muldoon
Assistant State's Attorney,
Cook County, Illinois


Friday Keynote Speaker:
Kurt Schmid
Senior Law Enforcement
Advisor/Technology Assessment
Branch Chief
Counterdrug Technology
Assessment Center
White House Office
National Drug Control Policy



Speakers:
Kurt Schmid, KEYNOTE
Kathleen Muldoon, KEYNOTE
Rick Ayers, NIST
Sam Brothers, CBP
Nicolas Duvinage, IRCGN
Michael Harrington, MSP
Wayne Jansen, NIST
Gary Kessler, Champlain College
Katja Koennecke, Bundeskriminalamt
Kyle Lutes, Purdue University
Neil Maitland, Radio Tactics Limited
Kevin Mansell, Control-F
Agents from Matrix Solutions
Rick Mislan, Purdue University
Lee Reiber, MFI
Amber Schroader, Paraben
Tom Slovenski, Elite Investigations
Greg Smith, TrewMTE


Workshop Sessions:
BK Forensics
Cellebrite
Cellular Data Resources
Control-F
Flashbox Technologies
Logicube
MicroSystemation
Mirror Consulting
NIJ
Mobile-Examiner
Oxygen Software
Paraben Forensics
Project-A-Phone
Radio Tactics, Limited
Susteen
Teel Technologies


  SPEAKERS

MOBILE FORENSICS WORLD 2008 KEYNOTE SPEAKER

Kurt Schmid
Senior Law Enforcement Advisor/Technology
Assessment Branch Chief for
the Counterdrug Technology Assessment Center

The White House Office of
National Drug Control Policy
Mr. Schmid will address current federal, state and local law enforcement challenges in the Mobile Forensics World, with some emphasis on emerging technologies and attendant demands they will place upon law enforcement in the near future.

Mr. Schmid will also generically describe the forensic vendors attempts to keep up with the rapidly changing technologies and the related issues brought about by this dynamic field.

Throughout his presentation, Mr. Schmid will provide some very interesting anecdotal information on experiences he's had in his 30 year state and 10 year federal law enforcement officer tenure and those that we have had at the national level relating to law enforcement forensics.
Kurt F. Schmid is currently serving as Senior Law Enforcement Advisor/Technology Assessment Branch Chief for the Counterdrug Technology Assessment Center (CTAC) in the White House Office of National Drug Control Policy (ONDCP). Prior to this assignment, he served as the High Intensity Drug Trafficking Area (HIDTA) National Director for five years in ONDCP. Previous to the National HIDTA Director position, he served as Executive Director of the Chicago HIDTA for approximately two years. He began his 38-year law enforcement career as an Illinois State Police Trooper. Schmid spent approximately nine years as a trooper assigned to patrol and approximately 12 years as a special agent in the criminal investigations division of the Illinois State Police. When he attained the rank of Captain, he served as Commander of the Illinois State Police Academy for approximately three years and prior to his retirement from the state police in 1998, he directed statewide investigative/intelligence operations for the agency for approximately five years.

Schmid has instructed law enforcement electronic surveillance operations courses to Federal, state and local agencies in 46 states. He was also adjunct instructor for the Federal Law Enforcement Training Center for approximately eight years. He is an active member of the International Association of Chiefs of Police, a long-standing member of the IACP Advisory Committee for Police Investigative Operations and an active member of the FBI Communications Assistance for Law Enforcement Act (CALEA) Implementation Section Forum dealing with law enforcement and the digital communications network issues. Schmid also participates on numerous law enforcement working and policy groups attending to interagency intelligence/information-sharing and technology issues, namely the GLOBAL Initiative and the Criminal Intelligence Coordinating Council. He has served with the National Technical Investigators� Association (NATIA) as National Vice President of Training and President of the Mid-States Technical Investigators Association Chapter.



MOBILE FORENSICS WORLD 2008 KEYNOTE SPEAKER

Kathleen Muldoon
Assistant State's Attorney,
Cook County, Illinois
State’s Attorney’s Office
Sex Crimes Division
Ms. Muldoon’s presentation will focus on the importance of the work and training of the Mobile Forensics Examiners attending MFW08 as it relates to criminal investigations and prosecution. She will include how the private sector also impacts what law enforcement does in these investigations. Throughout her presentation, Ms. Muldoon will also share case examples suitable for all audiences.
Ms. Muldoon has been a prosecutor with the Cook County State’s Attorney’s Office for over fourteen years. She has prosecuted thousands of cases including traffic offences, misdemeanors, felonies and Murders.

Ms. Muldoon is currently assigned to the Child Advocacy and Protection Unit of the Sex Crimes Division. She has been assigned to this unit since 2002. In this capacity she prosecutes Internet related cases as well as other sexual abuse case in the Chicago. She also supervises other prosecutors reviewing cases involving child sex abuse and Internet crimes involving children occurring throughout Cook County. Ms. Muldoon has been the Commander of the Internet Crimes Against Children (ICAC) Task Force for Cook County since its inception in 2004. This federally funded Task Force focuses on the investigation and prosecution of any Internet related crime against a child. The ICAC Task Force also provides training, equipment to the twenty-five (25) law enforcement members of the Task Force as well as providing community outreach in the form of Internet Safety Presentation throughout Cook County. In 2007 Ms. Muldoon was cross-designated as a Special Assistant U. S. Attorney to prosecute Internet Crimes Against Children in the Northern District of Illinois.

Ms. Muldoon provides training for prosecutors and law enforcement locally and throughout the United States. Ms. Muldoon lectures for numerous agencies including the Cook County state’s Attorney’s Office, Chicago Police Department, National White Collar Crime Center (NW3C), North East Multi-Regional Training (NMERT), FBI-Computer Analysis Response Team (CART) Program and the Chicago Regional Computer Forensic Laboratory (RCFL). She provides the legal portion of the classes involving the collection of digital evidence. She also provides the legal portion of classes involving the Investigation of Sexual Abuse of Minors. She is an active participant in the FBI-CART Moot Court program.


Acquisition Techniques of Mobile Devices and Associated Media

Richard Ayers
Computer Scientist
National Institute of Standards and Technology (NIST)
Mobile devices incorporating cellular capabilities are ubiquitous and contain a wealth of personal information useful in criminal cases, civil disputes, employment proceedings and recreation of incidents. Data acquisition performed on cellular devices operating over Global System for Mobile Communications (GSM) and non-GSM networks has proven not only frustrating but extremely tedious due to the rapid rate of new cellular devices appearing on the market. Software vendors specializing in cellular forensics are forced to continuously provide updates to software and associated hardware in order to maintain support and provide examiners with solutions for the latest technologies. Multiple hardware and software solutions exist which provide acquisition solutions for various makes and models of cellular devices and associated media. Forensic examination of mobile devices is a small part of computer forensics, in general. Consequentially, tools possessing the ability to acquire data from these devices are slowly maturing and continually expanding. This paper provides a brief overview on mobile device forensics and suggested procedures during the acquisition phase of GSM devices and associated media.
Mr. Rick Ayers is a computer scientist in the Information Technology Laboratory at the National Institute of Standards and Technology (NIST) in Gaithersburg, MD. Rick, a participant of the Cyber Corps program graduated from the University of Tulsa with a BS and MS in computer science. Current research focus is on mobile device forensics tools and proper acquisition techniques.


How Cell Phone "Forensic" Tools Actually Work

Sam Brothers
Sr. Computer
Forensics Analyst

U.S. Customs and
Border Protection
We will delve into the seedy underbelly of cell phone forensic tools. I will "peel back the curtain" allowing you to see what is going on "behind the scenes". If you want to be more than just a "click monkey" then this presentation is for you! We will be going over the various protocols that are used by several cell phone tools to communicate with your phones to extract data. I will be showing examples of AT Commands and other protocols. I will demonstrate how you too can perfom this type of research to discover what these tools are really doing.
Sam Brothers is currently working for US Customs and Border Protection as a Sr. Computer Forensics Analyst. He has been in the IT field for over 20 years, and is currently specializing in Cell Phone and Computer Forensics. He has taught classes around the country for various Law Enforcement and Government organizations on a wide variety of topics such as: Cell Phone Forensics and Service Oriented Architecture. In his spare time, he enjoys being a part-time professional magician, and running two marathons every year.


Advanced GSM Forensics

Nicolas Duvinage
Head of IT Forensics Departemente

Gendarmerie Nationale Forensic Research Institute (IRCGN), France
Nicolas Duvinage will present the limits of classical GSM forensics tools & techniques, as well as the three main technologies to perform advanced GSM forensics: Flash desoldering, Flashboxes and JTAG, each one having pros and cons. Mr. Duvinage will also give a summary of the current R&D projects in GSM forensics in his department.
Nicolas Duvinage has been a member of the Gendarmerie Nationale Forensic Research Institute (IRCGN) from 2001. He has been the head of the Information Technologies Forensics (INL) departement from 2005. He is vice-president of the Forensic Information Technologies Working Group (FIT-WG) of the European Network of Forensic Science Institutes (ENFSI, www.enfsi.eu). He is co-founder of the Association of French-Speaking Digital Investigations Specialists (AFSIN, www.afsin.org). He participates in the Europol national cybercrime experts meetings. Mr. Duvinage has initiated and supported advanced GSM forensics activities in his departement from 2005. His departement has trained several foreign units in the field of GSM forensics, and it develops many software in that field.


Searching For The Holy Grail: Hex Dump Analysis of Mobile Phones

Michael Harrington
Detective Sergeant
Michigan State Police Computer Crimes Unit
This is to be a one hour lecture on the new frontier of mobile phone forensic examinations. Attendees will learn what a hex dump is, the tools and techniques used to obtain such a memory dump and some tips for analysis of the hex dump. Attendees will also learn why hex dumping is important, what evidence can be obtained from such a dump of the memory and the limitations of traditional tools as compared to the hex dump analysis.
A sworn law enforcement officer with the Michigan State Police since 1995, Michael Harrington joined the Computer Crimes Unit at its inception in November of 2000. He is a frequent instructor in the field of computer forensics, having taught across the United States and in Europe. He served as the International High Tech Crime Investigator�s Association Treasurer in 2004 and Secretary in 2005. In addition, he is the past president of the Michigan Chapter of the HTCIA. D/Sgt. Harrington has published many articles on Mobile Forensics and maintains a mobile foreniscs blog at http://mobileforensics.wordpress.com. D/Sgt. Harrington holds Certificates for Certified Forensic Computer Examiner (CFCE) and EnCase Certified Examiner (EnCE)


Issues in Cell Phone Forensics

Wayne Jansen
Researcher
National Institute of Standards and Technology (NIST)
Cell phones are ubiquitous today in society. When involved in a security incident or crime, the digital evidence on them is extracted and examined using specialized forensic tools. This talk describes factors that impede the advancement of cell phone forensics, including complications with the tools themselves and the way in which they are applied, and suggests various techniques for improvement.
Mr. Wayne Jansen is a researcher at the National Institute for Standards and Technology (NIST) in Gaithersburg, Maryland. His interests are in communications, distributed applications, and computer security, with a focus on handheld devices. Wayne heads the Mobile Security Project at NIST.


Cell Phone Analysis: Technology, Tools, and Processes

Gary C. Kessler
Associate Professor
Champlain College
Cell phones and other mobile devices have become ubiquitous and increasingly contain information relevant to criminal activity. This lecture will provide a basic description of cell phone terms and concepts, including types of networks and phones, to provide a foundation for understanding the types of information that can be acquired from the phones themselves as well as from cellular network providers. Examples of cell phone tools will be presented as well as a process for cell phone analysis. A detailed case study will provide examples of information that can be found on phones (e.g., phone book, calendar, word lists, images, videos, call history, etc.). Legal issues of cell phone seizure will also be briefly addressed.
Gary C. Kessler is an Associate Professor, program director of the Computer & Digital Forensics major, and director of the Center for Digital Investigation at Champlain College in Burlington, VT. He is also a member of the Vermont Internet Crimes Against Children (ICAC) and Internet Crimes Task Forces, and is a director of GKS Digital Services, a consultancy specializing in computer and network forensics, computer and network security, and Internet and TCP/IP protocols and applications. Gary is a frequent speaker at industry conferences, has written two books and over 60 articles on a variety of topics, is on the editorial board for the Journal of Digital Forensics, Security and Law, and is an associate editor of the Journal for Digital Forensic Practice. He holds a B.A. in Mathematics, an M.S. in Computer Science, and an Ed.S. in Computing Technology in Education; is a CCE and CISSP; and is a member of the HTCIA and HTCC.


The Necessity of Physical Acquisition and Analysis

Katja Koennecke
German Bundeskriminalamt
Ms. Koennecke will present a case study of how a physical examination lead to the collapse of a terrorist plot in Europe.
Katja Koennecke has been a member of the Bundeskriminalamt since 1993 and is currently the supervisor overseeing the agencies mobile forensic unit. Ms. Koennecke has been involved in mobile forensics since approximately 2002 and was instrumental in the development of the original Forensic Card Reader and associated software capable of interpreting data, including tagged deleted SMS messages from SIM cards. Ms. Koennecke developed mobile forensic tools that established her agency as one of the top providers of mobile phone examinations. Ms. Koennecke has been sought as a beta tester for a majority of the private industry developers of mobile phone tools. Ms. Koennecke has traveled throughout Europe to assist in major investigating involving mobile phones and her analysis has resulted in arrests and action which averted major civil disruptions.


A Proof of Concept Forensics Tool for Windows Mobile Devices

Kyle Lutes
Associate Professor
Purdue University
One of the largest issues surrounding mobile phone forensics is the proprietary methods of storage used by each phone manufacturer. Many different mobile devices are based on the Windows Mobile operating system from Microsoft. In addition to basic voice capabilities, Windows Mobile devices can be used to store contacts, calendar appointments, emails, text messages, and call histories. Additionally, because these devices frequently include a digital camera, they can store digital photos and video files. Currently, there is just one software tool designed to help law enforcement officers with the acquisition of information contained on Windows Mobile devices. However, this tool is part of a larger forensic software package and its price puts it out of the reach of many potential users. In this session we'll demonstrate a proof of concept software tool we have developed that can be used to acquire nearly all data from Windows Mobile devices. Data retrieved from the device can be displayed on a connected laptop computer, saved for later analysis, or printed. Finally, we conclude the session with an overview of the technologies we used when developing the software.
Kyle Lutes is an Associate Professor of Computer & Information Technology (CIT). He has authored/co-authored numerous papers, many of which were presented at national conferences or published in trade magazines/journals as well as two college textbooks. His background and interests cover all areas of software development, including mobile computing, client/server information systems, web application development, object-oriented programming (OOP), programming languages, software engineering, user interface design, and rapid application development (RAD). Kyle has been writing software professionally since 1982. Prior to his current appointment at Purdue, he held various software development positions in industry and has worked on projects for such industries as banking, telecommunications, publishing, hospitals, medical schools, retail, and pharmaceuticals. Addition to his teaching and research duties at Purdue, Kyle is the founder of DelMar Information Technologies, LLC. His company specializes in custom software development using Microsoft technologies (C#, .NET, .NET Compact Framework, Active Server Pages (ASP), SQL Server, and Visual Basic) for mobile devices (smart phones and Pocket PCs), enterprise, web, client/server and desktop architectures. DelMar Information Technologies also sells several software products and services, including corporate training classes.


Horses for Courses

Neil Maitland
M.Eng MIET
Radio Tactics Limited
During the last few years the rate of technological progress in the area of mobile phone forensics has been astonishing. There has been an emergence of several streams of technology to satisfy the requirements of different types of data gathering, each with it's own benefits and pitfalls. For example, instead of being limited to specialised units, mobile phone examination technology is currently emerging into mainstream policing where the requirements can be very different to a forensics lab. This presentation will examine the key requirements of different customers for forensic phone data and the technologies currently available or in development that may be used to fulfil those needs. It will be shown that it is not possible to apply a "one size fits all" solution to these many different needs, and that forensic phone tools will need to continue to diversify if they are to stay in step with the growing needs of customers.
Neil has been working in the mobile phone industry for many years which has included development of GSM and 3G software and mobile hardware integration. Previous roles have included stints consulting for companies such as Nokia, Ericsson, NEC and Siemens. In 2004 he joined forces with Andy Gill and formed Radio Tactics Limited with the sole purpose of providing Law Enforcement with equipment for gathering intelligence and evidence from mobile phones. As Technical Director, Neil is responsible for the delivery of products to achieve this aim.


Digging Deeper - Finding Gold

Kevin Mansell
Control-F
You've downloaded the call lists, contacts, messages and multimedia files. Your forensic tool says "Download Complete". But is it? Times are changing. Today's mid-range and high-end handsets are already capable of running 3rd party applications and storing gigabytes of information on removable memory cards; a trend that will only continue as the line between phones and computers continues to blur. Properly examining such handsets requires more than a regular "point and click" phone download. In this session we will share tips and tricks for uncovering forensic artefacts on handsets and removable media that you may not even know exist. Linking photos to phones and phones to owners. Tying individuals to places and memory cards to handsets. It's time to start digging deeper.
Kevin Mansell is a recognised authority in the field of mobile phone forensics with a proven track record in training high tech crime investigators in the safe and effective retrieval of digital evidence. Prior to starting his own company, Kevin spent 3 years as a high tech crime trainer at the UK's National Centre for High Tech Crime Training. Kevin has trained law enforcement personnel in mobile phone forensics, network and internet investigations and computer forensics. Since developing an entry-level course for mobile phone examiners in 2005, Kevin has successfully delivered mobile phone forensics training to over 200 students from the UK and overseas. Kevin has represented the UK on Interpol's European Working Party on IT Crime where he collaborated with overseas colleagues to identify and publish good practice in the rapidly maturing field of mobile phone forensics. He has also spoken at both national and international electronic crime conferences. Before working in the field of digital forensics, Kevin gained 9 years experience working within the telecommunications industry in a variety of technical and project management roles. This included helping GSM network operators to deploy state of the art fraud detection systems to stem revenue leakage.


PDA and Cell Phone Forensics in the Heat of the Battle

Intelligence Analysts
Matrix Solutions
We will describe operationalizing PDA and Cell Phone Forensics in the field. This differs in what law enforcement is dong due to lack of ultimate use of phone, i.e. IEDs, covert comms, and such. Also, we will describe and discuss shortcomings and needs in the forensics field dealing with these items. We can also give accounts and emerging technologies as far as current hacks and tweaks that are being done.
Former SEAL Team Member/Commander, Counter Terrorism Analyst, NSA Digital Network Analyst. All with SpecOps background and many operations in many parts of the world.


Mobile Forensics World 2008 & Current Research

Rick Mislan
Conference Director
Purdue University
With access to a state of the art facility in the College of Technology at Purdue University, teaching and learning from top-notch undergraduate and graduate students who enjoy solving today and tomorrows Cyber Forensic problems, and working with a staff who is truly supportive of his Cyber Forensic endeavors, Rick is blazing several new trails in Mobile Forensics Research. His work with flasher technologies, creation of a software/hardware testing database of mobile forensic tools, development of a knowledge base and expert system for mobile forensics investigators, and collaboration with many of the international experts in this field are just a few of the exciting things going on at Purdue's Cyber Forensics Lab. Rick will outline Mobile Forensics World 2008, what he and his colleagues and research students are up to, how you can benefit from their work, and how you can become involved with little or no effort.
Rick is the Mobile Forensics World Conference Creator and Director. Rick currently serves as an assistant professor at Purdue University's Cyber Forennsics Lab in the College of Technology specializing in the area of Cyber Forensics. Rick's areas of research include Small-Scale Digital Device Forensics, Unusual Sources of Digital Evidence, and the Application of Artificial Intelligence Techniques for Improving Efficiency in Cyber Forensics. He is also a faculty member with the Center for Education and Research in Information Assurance and Security (CERIAS). Rick has taught graduate and undergraduate courses in Information Security, Network Management, and E-Business Strategy. Rick has also served as a Technology Director and Educator for various school districts, a Communications Electronic Warfare Officer for the U.S. Army, and a Radio Disc Jockey. He has authored several articles in the area of Small Scale Digital Device Forensics, serves as co-editor for the Small Scale Digital Device Forensics Journal, and acts as a reviewing editor for the National Institute of Standards and Technology (NIST) on Guidelines for Cellphone Forensics, Guidelines for PDA Forensics, Cell Phone Forensic Tools, and PDA Forensic Tools. Rick is in the process of completing his doctoral dissertation, preparing the ultimate online resource for his course in Small Scale Digital Device Forensics, and planning the annual Mobile Forensics World Conference. Through his consulting practice, SmartPhoneForensics.com, Rick works with private, local, state, and federal law enforcement agencies in Mobile Device Forensics.


Cellphones and Magic � Never will the two meet!

Lee Reiber
Owner/Instructor
Mobile Forensics, Inc.
From the button cowboy to the hex dumper I hear "cellphones are like performing magic!". With this attitude the cellular examining community has failed to grow. Cellular data extraction, when performed right, involves the scientific method of defining the problem, gathering information and resources, forming a hypothesis, performing the extraction, analyzing the data, interpreting the data, publishing the results and finally retesting and validating. Because of the constantly changing variables of cellular data extraction it has become too complicated for many examiners and thus is has been labeled "black magic". Let's walk through cellular data extraction cases and define the scientific method as it relates to EVERY case that is put in front of the examiner.
Lee Reiber is owner and lead instructor for Mobile Forensics Inc (MFI) and CellPhoneDetectives.com He has been featured in several newspapers, most notably the New York Times and the Washington POST speaking on the topics of cellular evidence retrieval. Lee regularly contributes to Law Officer Magazine as a writer, specifically dealing with electronic data discovery and recovery. Lee speaks to both prosecutors and law enforcement agencies on the value of the digital evidence stored on hand held devices as well as the records stored with cellular carriers. He has presented to not only law enforcement officers from the United States and Canada, but to officers from around the globe. Lee is a member of the International High Technology Crime Investigation Association (HTCIA) as well as the International Association of Computer Investigative Specialists (IACIS). Lee also works as a Computer and Cellphone Forensic Examiner for the Boise Police Department where he has worked since 1995.


The Evolution of Mobile Forensics PDA to Cell to iPhone: What every examiner should know

Amber Schroader
CEO
Paraben Forensics
The device frontier has changed to higher capacity and fuller operating system devices. How does an investigator deal with these new hurdles, and what data will be retrieved. Review of new devices in market to include the iPhone will be done and broken into primary evidence stores and pitfalls in examination.
Amber Schroader has been involved in the field of computer forensics for the past sixteen years. During this time, she has developed and taught numerous courses for the computer forensic arena, specializing in the field of wireless forensics as well as mobile technologies. Ms Schroader is the CEO of Paraben Corporation and continues to act as the driving force behind some of the most innovative forensic technologies. As a pioneer in the field, Ms Schroader has been key in developing new technology to help investigators with the extraction of digital evidence from hard drives, e-mail and, hand held and mobile devices. Ms Schroader has extensive experience in dealing with a wide array of forensic investigators ranging from federal, state, local, and corporate. With an aggressive development schedule, Ms Schroader continues to bring new and exciting technology to the computer forensic community world wide and is dedicated to supporting the investigator through new technologies and training services that are being provided through Paraben Corporation. Ms Schroader is involved in many different computer investigation organizations including The Institute of Computer Forensic Professionals (ICFP), HTCIA, CFTT, and FLETC.


Cellular Forensics: Is it Ready for Prime-Time?

Tom Slovenski
Licensed
Private Investigator

Elite Investigations
of South Carolina
Tom Slovenski is not your average private investigator. As a former Police Detective with a Forensics background, Tom now works in the private sector as an investigator and a cellular forensics specialist. A self-proclaimed "John the Baptist of Cell Forensics", Tom is continually heralding the need and benefits of cell data recovery in the private arena. In this amusing and informative session, Tom will enthusiastically share his experiences as he has tried to persuade an untrained populace of their need for this remarkable science. In addition, Tom will elaborate on the legal and business issues facing those who wish to take cell data recovery services to the masses and the tremendous benefits to those who persevere in this beneficial and rising support service.
Tom Slovenski is the owner of Elite Investigations of SC, LLC and Cellular Forensics.com, located in South Carolina. As a former law enforcement detective and now a private investigator, Tom brings over 20 years of Law Enforcement and Investigation experience to the public sector. Tom was a Sergeant with a large metropolitan Sheriff's Department and member of the Forensics Division while serving as the Senior Investigator of Internal Affairs and directing investigations in five (5) separate county divisions. In the private sector, Tom specializes in difficult case work for some of the most elite clientele in the corporate and domestic law fields. As a Certified Cellular Forensic Examiner Tom enthusiastically endeavors to train and inform private investigators and law enforcement on the importance and value of Cellular Forensics. Tom's articles on Cellular Forensics for private investigators have been pubished nationally. In addition, Tom is a noted speaker and consultant in the field of Cellular Forensics throughout the Southeast. His memberships include the South Carolina Association of Legal Investigators (SCALI) and the Association of Christian Private Investigators. With a passion for locating missing children, Tom is also in the process of forming a non-profit organization to provide assistance in the locating and recovery of missing children for families that cannot afford this service.


Mobile Telephone Evidence for Everyone

Greg Smith
Principal
Trew & Co.
There are numerous areas where evidence can be acquired in GSM (Global System for Mobile) communications. Greg's presentation will look at some of the close relationships between the various species of components in GSM comprising SIM card, handset and the radio network in order to appreciate the symbiotic link between them. To then illustrate how mobile telephone evidence can be useful to criminal investigaions - irrespective of whether the investigation is initiated by the Prosecution or Defence - and to equally show some limitations inherent in mobile telephone evidence. Only by appreciating the positives and negatives when dealing with SIM card and handset evidence and cell site analysis do they then start to have a value to the criminal justice system and our courts of law and, more importantly, remove some of the modern myths created by those who see to use mobile telephone forensics as nothing more than a commecial vehicle.
Principal in the firm of Trew & Co and TrewMTE forensics. Chief Training and Examining Officer Mobile Telephone Examination Board (MTEB). Specialising in GSM/3G WCDMA U/SIM U/ICC Cards, handsets and cell site analysis. Greg has been involved with forensics and technology evidence for 22 years (1986-2007). 20 years with wireless evidence, of which 14 years dealing with Global System for Mobile (GSM) communications evidence. The extent to which Greg has dealt with cellular/wireless evidence relates originally to the analogue mobile telephone system in the UK called TACS (Total Access Communications System) launched 1985. This wireless system was phased out of use in the late 1990s, although the last TACS wireless licence expired in 2005. The predominant evidence for TACS related to investigating data on devices, stolen and cloned mobile telephones, and cell site analysis. With the introduction of GSM in 1992 and the four fully operational UK GSM networks by 1994, Greg assisted with the introduction of GSM evidence relating to SIM and handset evidence and the introduction of radio maps, called GSM digital cell footprint map categorised today as Best Server Plots/Density Maps and Single Cell Prediction Plots/Density Maps. His work with GSM began in 1993 with mobile telephone and SIM card examination, and the following year GSM cell site analysis. In 1999 Greg whilst leading the field in GSM evidence, created the first GSM accredited mobile telephone courses in the UK delivered in 2001 and in 2003 set about creating the first 3G USIM courses in the UK, which began in November 2005. His main skillsets are conducting research and development, acquisition and harvesting of data, examining evidence but also presenting evidence in criminal courts of law, thus combining specialist R&D and evidential experience skillsets necessary when dealing with evidence in criminal proceedings. He gave evidence to the House of Commons Home Affairs Select Committee - Terrorism Detention Powers relating to mobile telephone evidence in 2006.


   







































Copyright 2010 Purdue University Cyber Forensics Lab. All Rights Reserved.