School of Computing

Nov 27
11:00 - 12:00
SyncTriage: Using synchronisation artefacts to optimise acquisition order in a digital forensic investigation - Chris Hargreaves
School of Computing - Security Group Seminar
Speaker: Chris Hargreaves (University of Oxford)

Abstract: While the number and variety of devices can be problematic in a digital investigation, it is also a problem for consumers. As a result, software developers have implemented synchronisation features to assist customers handle the multitude of devices that they now use. This paper describes how these synchronisation features can be exploited as part of a digital investigation to use the results from the examination of one device to infer content of other devices. This extracted information is potentially useful in determining the devices that should have the most resources expended during an investigation to obtain the most actionable evidence in the quickest and most efficient manner.

Bio: Dr Chris Hargreaves is a lecturer at the University of Oxford, teaching on the Professional Masters Programme (digital forensics module, and also data security and privacy). He is on the editorial board for FSI Journal of Digital Investigation and programme committee for several international conferences. He was Conference Chair for DFRWS EU in 2020. Prior to working at Oxford he was a Course Director for the MSc Digital Forensics at Cranfield University based at the Defence Academy of the UK, where he was based for 8 years. He also runs a digital forensics company undertaking digital forensics R&D, training and consultancy.


United Kingdom
Canterbury map


Open to everyone, especially those interested in cyber security research,


Contact: Jason R.C. Nurse

School of Computing, University of Kent, Canterbury, Kent, CT2 7NF

Enquiries: +44 (0)1227 824180 or contact us.

Last Updated: 14/08/2015