INsig2 experience in DIGITAL FORENSICS TEACHING FOR
law enforcement and lawyers
Damir DelijaLAW TECH EUROPE CONGRESS
Prag, October 19th 2014
Why Education and Training?
Continious education is mantra today and a hard fact too• For anyone involed any aspect of digital investigation it is an
heavy burden
Problem is how to provide same quality of knowledge and experience to all involved • More than one career starting point and much more carrier
paths with different accumulated expericence and knowledge• Law enforcement, Legal, Technical / ICT
LTECH 2014
Who Needs to Know What?
Who needs to know what?• Legal practitioner about digital evidence?• Forensic and tehnical experts about law?
Who should perform digital forensic tasks in investigations?
When the investigation should include experts? • Who is an expert ?• What defines expertise of an expert ?
LTECH 2014
What Kind of Knowledge ?
Digital Forensics Methodology
Digital Forensics Tools
Relevant IT related knowledge and skills (tech viewpoint)• System Adminstration skills and tools • System Programming skills and tools
Sources of knowledge and skills for digital forensics
LTECH 2014
Why Education for Digital Forensic ?
Without training and education there is no effective use of digital forensics tools and methodology
The ability to use different tools does not mean the ability to work reliably especially from legal point of view
With HW and SW training there is a need for additional education, continuous improvements and keeping up
Who Needs Digital Forensic Skills and Knowledge
IT business • all kind of digital forensics knowledge and practice • bussines needs, iternational span
Police, prosecution, judiciary ...• people there have to understand digital forensics
Academy • people who can teach existing digital forensics and who can
develop and evaluate new digital forensics techniques
Policy-makers and decision-makers • in all involved organizations need to understand meaning
and importance of digital forensics and related strategic issues like permanent training and education
LTECH 2014
Digital Forensics Knowledge Path
Basic educaion and training • Professionall, technical, legal
Keeping updated• Keeping up tehnology• Deeper specialisation• Keeping up with global trends• Permannet roles, role rotations and duty rotations• Career path as part of skills improvement
Profesionall and technical certifications• Proof of ability and qualifications
Continuous education and knowledge transfer• Part of the job basics and ethics
LTECH 2014
Knowledge Sources Academy – long term things • educational programs based on the recognized forensic curriculums• seminars, technology, research, think-thank• long-term projects and research that can not be carried out elsewhere
Vendors – targeted training / professional training• HW / SW vendors with product trainings• Education for certain forensic and other products, skills• General training and education based on certified training material
Internal, the "knowledge" of the organization - continuous internal education• Analytics, information about events as sources• flow of information and use the information as a knowledge
Internet• Digital forensic online resources
Other• Conferences, trends local and global
Education and Novelities
Digital Forensics follows the development of technology and science, also the evolution of crime• New things are coming or are here already
Problem – how to keep up
Solution – continuous education, but how do it ?• Who is trainer and who is trainee, how training is done ?• Who is initiating a training / education ? • Where are knowledge sources ?
How long it will to fulfill training, how to measure success• Who train trainers ?• Who evaluate results ?• Who evaluate achieved knowledge
How expensive is new knowledge and how expensive it to be “in dark”
INsig2 Mission
Continuous digital forensics training to meet our customer needs
Education is customer oriented, based on tools and tasks• At user premises, in our training center or any appropriate
location
Consulting in various issues related to digital forensics
What is Important
Continious learning
Tools developement
Evolution of computer related crime
Feedback from real world what is missing and what needs improvements
Keep up with tehnology
Keep up with digital forensics methodology
Keep up with legal issues
Certifications / acreditations
Skills and training into ECTS / CPEs
ConclusionKnowledge is expensive, but ignorance is even more expensive • trivia, but no less true
There must be system of continuous training • internal resources are often overlooked and left to fade
away
Because of limited resources• Cooperation (very, very hard to achieve)• Career path benefits • Skills and training into ECTS / CPEs
LTECH 2014
13
Q & A
LTEC 2014
http://hr.linkedin.com/in/damirdelija