INsig2 experience in DIGITAL FORENSICS TEACHING FOR law enforcement and lawyers

INsig2 experience in DIGITAL FORENSICS TEACHING FOR

law enforcement and lawyers

Damir DelijaLAW TECH EUROPE CONGRESS

Prag, October 19th 2014

Why Education and Training?

Continious education is mantra today and a hard fact too• For anyone involed any aspect of digital investigation it is an

heavy burden

Problem is how to provide same quality of knowledge and experience to all involved • More than one career starting point and much more carrier

paths with different accumulated expericence and knowledge• Law enforcement, Legal, Technical / ICT

LTECH 2014

Who Needs to Know What?

Who needs to know what?• Legal practitioner about digital evidence?• Forensic and tehnical experts about law?

Who should perform digital forensic tasks in investigations?

When the investigation should include experts? • Who is an expert ?• What defines expertise of an expert ?

LTECH 2014

What Kind of Knowledge ?

Digital Forensics Methodology

Digital Forensics Tools

Relevant IT related knowledge and skills (tech viewpoint)• System Adminstration skills and tools • System Programming skills and tools

Sources of knowledge and skills for digital forensics

LTECH 2014

Why Education for Digital Forensic ?

Without training and education there is no effective use of digital forensics tools and methodology

The ability to use different tools does not mean the ability to work reliably especially from legal point of view

With HW and SW training there is a need for additional education, continuous improvements and keeping up

Who Needs Digital Forensic Skills and Knowledge

IT business • all kind of digital forensics knowledge and practice • bussines needs, iternational span

Police, prosecution, judiciary ...• people there have to understand digital forensics

Academy • people who can teach existing digital forensics and who can

develop and evaluate new digital forensics techniques

Policy-makers and decision-makers • in all involved organizations need to understand meaning

and importance of digital forensics and related strategic issues like permanent training and education

LTECH 2014

Digital Forensics Knowledge Path

Basic educaion and training • Professionall, technical, legal

Keeping updated• Keeping up tehnology• Deeper specialisation• Keeping up with global trends• Permannet roles, role rotations and duty rotations• Career path as part of skills improvement

Profesionall and technical certifications• Proof of ability and qualifications

Continuous education and knowledge transfer• Part of the job basics and ethics

LTECH 2014

Knowledge Sources Academy – long term things • educational programs based on the recognized forensic curriculums• seminars, technology, research, think-thank• long-term projects and research that can not be carried out elsewhere

Vendors – targeted training / professional training• HW / SW vendors with product trainings• Education for certain forensic and other products, skills• General training and education based on certified training material

Internal, the "knowledge" of the organization - continuous internal education• Analytics, information about events as sources• flow of information and use the information as a knowledge

Internet• Digital forensic online resources

Other• Conferences, trends local and global

Education and Novelities

Digital Forensics follows the development of technology and science, also the evolution of crime• New things are coming or are here already

Problem – how to keep up

Solution – continuous education, but how do it ?• Who is trainer and who is trainee, how training is done ?• Who is initiating a training / education ? • Where are knowledge sources ?

How long it will to fulfill training, how to measure success• Who train trainers ?• Who evaluate results ?• Who evaluate achieved knowledge

How expensive is new knowledge and how expensive it to be “in dark”

INsig2 Mission

Continuous digital forensics training to meet our customer needs

Education is customer oriented, based on tools and tasks• At user premises, in our training center or any appropriate

location

Consulting in various issues related to digital forensics

What is Important

Continious learning

Tools developement

Evolution of computer related crime

Feedback from real world what is missing and what needs improvements

Keep up with tehnology

Keep up with digital forensics methodology

Keep up with legal issues

Certifications / acreditations

Skills and training into ECTS / CPEs

ConclusionKnowledge is expensive, but ignorance is even more expensive • trivia, but no less true

There must be system of continuous training • internal resources are often overlooked and left to fade

away

Because of limited resources• Cooperation (very, very hard to achieve)• Career path benefits • Skills and training into ECTS / CPEs

LTECH 2014

13

Q & A

LTEC 2014

[email protected]

[email protected]

http://hr.linkedin.com/in/damirdelija