中国计算机取证计算峰会 (2006年会)

 

 演讲嘉宾

 

   Frank Butler, EnCE –

Director Business Development Training Division

21400 Ridgetop Circle, Suite101, Sterling VA 20166

703-433-5400 Phone

703-433-5368 Fax

 

Frank Butler  worked in law enforcement for 26 years, focusing on computer forensic investigations since 1984. He is a former Detective Sergeant of Merseyside Police Force, Liverpool, England. The last 5 years of his service was spent as officer in charge of the Computer Investigation Unit. Butler was also an instructor for the UK National Course on Computer Related Crimes in Great Britain. He spent an attachment as the press liaison officer for the Merseyside Police; Butler was co-author of the UK. Association of Chief Police Officers, Best Practice Guide for Computer Evidence and  he has spoken worldwide on the subject of computer forensics in many environments.

Since 2001 Frank has worked for Guidance Software and now works in the training Division of the Washington DC office,  having previously been Director of Training for Europe.  Frank’s role involves him in devising and developing training opportunities fro Guidance both in established filelds and in many developing Nations. Having devised the strategies Frank will often be involved in  delivering them.  Frank has conducted trainings in many parts of  the world, notably South East Asia and is involved in ongoing work to expand the Guidance training delivery area.

 

Speaking and Educational Engagements:

 

    -CEIC, February 2004-Malaysia “Computer Forensics”

    -CEIC, February 2004-Singapore “Computer Forensics”

    -CSI 30th Annual, November 2003-Washington D.C. "The Global Enterprise - Forensic audits across the large scale network"

    - InfoSec Europe 2003, May 2003-London, U.K. “Forensic Investigations on the WAN”

    - Nites Conference, February 2003-Dublin, Ireland “Digital Investigations and Computer Forensics”

    - University of Salford, November 2003-England –U.K., (Instructor) “Security and Computer Crime” module.

    - CompSec Europe, November 2002- London, U.K. “Computer Misuse Enquiries in the Commercial world”

    - ISACA North England, October 2002-U.K. Chapter Meeting Speaker “Digital Evidence Gathering”

   - Computer Crime Branch of Guardia Civil, September 2002-Madrid, Spain “Why Computer Forensics?”

    - Instructor for Guidance Software on the subject of Computer Forensics Investigations – 2000-present

    - NATO Computer Crime and Security Conferences, bi annually 1998 – 2004

 

Certifications:

·    EnCase Certified Examiner (EnCE), Guidance Software Inc.

Trainings conducted in :

 

    United States, United Kingdom, Germany, Spain, Ireland, Bulgaria, Singapore, Thailand, Malaysia, Indonesia, Brunei, Hong Kong and Republic of Korea.

 

 

    Frank 目前就职美国Guidance公司培训部,主要从事Encase 软件的培训工作。1984年开始从事计算机取证调查工作,曾在英国利物浦警察局工作26年。从2001年开始,参加美国Guidance公司,负责欧洲培训业务。曾参加十多个国际性计算机取证会议,并做专业报告。报告题目有:“计算机取证技术”、“大型局域网系统下的取证分析”、“无线局域网调查取证”、“信息安全与计算机犯罪”、“电子证据获取”、“为什么需要计算机取证”等。曾在美国、英国、德国、西班牙、爱尔兰、新加坡、泰国、马来西亚、印度尼西亚、香港、韩国等国举办过培训。

 

 

 

Stefan Fleischmann,    CEO

 

   

 

 

    Stefan Fleischmann serves as Chief Executive Officer of X-Ways Software Technology AG, a German stock corporation operated from Cologne. Stefan originally started a software development business (sole proprietorship) in 2000 while being a student at the University of Master. He received the German equivalent of a Master's degree in Information Systems in 2001. While working for Micronas, a semiconductor company where he trained employees internationally in SAP software, he started X-Ways corporation in April 2002 and concentrated on the computer forensics aspect of his software WinHex. In 2004, the forensic edition of that software, X-Ways Forensics, was released, and Stefan expanded the business into the computer forensics training field. He personally trains law enforcement officers and private sector forensic examiners in the USA and Germany, including federal government personnel in both countries, and supervises and participates in continued development of the company's software. With more than 16,500 clients worldwide, X-Ways Software Technology considers itself the leading supplier of computer forensics software in Europe. Stefan is also an associate member of IACIS (International Association of Computer Investigative Specialists).
   Stefan Fleischmann,德国X-Ways软件
公司CEO2001年获得德国信息安全硕士学位。20024月创立X-Ways软件公司,凭借他开发的软件WinHex,进入并开始专注于计算机取证技术领域。2004年,他发布了专业取证分析软件X-Ways Forensics,并开始对德国、美国等执法部门、私人调查机构进行计算机取证技术培训。目前,X-Ways Forensics软件已经在世界上拥有16,500客户,是欧洲国家主要采用的计算机取证产品。

 

     

 Mike Levin From  Elijah Technologies

        Elijah Technologies is a premier American legal technology firm offering comprehensive solutions to computer forensics,electronic discovery and legal document management. Mike compliments his work as a forensic examiner with his studies toward a law degree from the DePaul College of Law. Prior to joining Elijah, Mike worked for in the Illinois Attorney General and Cook County State's Attorney offices. Before law school, Mike was a senior web developer with nearly a decade of experience. He has been employed in various environments from dot-com start-ups to million dollar international corporations, and even incorporated his own web development and design firm. Mike is a graduate of the University of Illinois at Chicago's business entrepreneurship program. His degree in Information Decision Science focused on systems analysis & modeling relating to business practices. Mike enjoys restoring his often broken classic racing Vespa. 美国Elijah科技公司是一家美国法律技术机构,主要提供计算机取证技术、电子物证发现和物证司法保管等服务。Mike 目前是Elijah科技公司的计算机取证分析员。在此之前,他曾为伊利诺斯州首席检察官工作。                                          

 

 BJ Gleason   

     

 

    BJ Gleason has been teaching computer science and security classes for over 20 years. He first came to Korean in 1995 to teach with the University of Maryland, and is now also working for Group W Incorporated as a Systems and Security administrator. He has served as a consultant to Exxon, Unisys, Atari, and the Federal Reserve Board, among others. He holds a Educational Specialist (Ed.S) in Computers in Education, as well as degrees in Computer Science, Asian Studies, and Criminal Justice. Mr. Gleason holds numerous computer certifications, including Microsoft MCSE, Cisco CCNA, and CISSP. He is also a Certified Computer Examiner from the International Society of Forensic Computer Examiners.
    BJ Gleason 教授从事计算机安全方面教学已超过20年, 1995年开始赴韩国马理兰大学,同时兼任 Group W Incorporated 系统安全管理员,Exxon, Unisys, Atari,美国联邦储备金监察小组(Federal Reserve Board)顾问. Gleason获得多种计算机类资质认证,包括Microsoft MCSE、Cisco CCNA、CISSP。同时,他具有ISFCE 颁发的计算机取证分析师资格认证。

 

 

Ben Pasco          香港德勤财务调查服务有限公司 

 

Ben Pasco   

     

 

      Ben is co-head of Deloitte's Analytical & Forensic Technology practice in China based out of Hong Kong. Prior to joining Deloitte, Ben was the founding director of a private forensic investigative practice working throughout Asia. He started his career in the Royal Engineers and after qualifying as an electrical and building services engineer, he served in various specialist units around the world with responsibilities that included the conducting of highly technical forensic investigations. Ben finished his service in the Royal Engineers in the post of Chief Technical Officer for the Hong Kong Government and upon his discharge; he started his own business focusing on technology solutions for the security industry. Ben has extensive experience using technology solutions in fraud related and other investigations, including murder, kidnapping, t tracing assignments, intellectual property theft and infringement cases, employee misconduct and sexual cases. Ben has been involved in the enforcement of Anton Pillar orders for the retrieval of evidence on computers and other date storage devices, and has given Expert Oral Testimony as a Computer Forensics Practitioner & Examiner in criminal and commercial cases. Ben is a Professional Member of the Forensic Science Society (MFSSoc), the Expert Witness Institute (MEWI), a Certified Forensic Consultant (CFC), a Certified Fraud Examiner (CFE), an EnCase Certified Examiner (EnCE), and a member of the Association of Anti Money Laundering Specialists (ACAMS). He is currently a director of the Hong Kong Chapter of the Association of Certified Fraud Examiners.
    BEN是德勤财务调查服务有限公司合伙人,负责开展中国地区的业务合作。在加盟德勤财务调查服务有限公司之前,他曾经在一家私人调查取证事务所担任经理,工作区域主要面向全亚洲。BEN取得电子&制造业服务工程师资格后做为一流的工程师,在世界许多知名专业机构工作过,主要负责指导如何利用高科技术进行取证调查。曾在香港政府担任首要技术官员,辞职后,自己组建公司,把工作重点投向安全技术产业的技术解决策略方案方面。BEN在运用独特技术方案解决诈骗案件及其它相关调查(包括:凶杀、绑架、财产追踪、知识产权非法盗用、雇员渎职、性侵害)方面的案例中有着丰富的经验。BEN作为一名计算机取证从业人员&刑事、商业犯罪检查官被授权为法庭口头证据专家,有权执行Anton Pillar命令对相关的计算机及其它时期的存储介质设备进行取证。BEN是法医科学协会专业会员,证据协会专家,法证认证顾问,企业舞弊查核师,ENCASE认证分析员,反洗钱专家组成员。现任企业舞弊查核协会香港区域负责人。

    

 

 

    

陳立康;From Risk3 Consulting Limited

                          

 Fred Chan is a Director at Risk3 Consulting Limited, a consulting firm providing services in forensic investigations, information security reviews, electronic evidence recovery and technical surveillance counter measures. Prior to joining Risk3 in 2003, Mr. Chan held senior position at an internationally renowned risk consulting company for seven years where he practiced forensic accounting and computer forensics. He also has over eight years of experience in auditing, accounting and corporate finance with an international accounting firm, a leading global industrial manufacturer, and a regional conglomerate. Mr. Chan is an MBA, a Certified Public Accountant (CPA), Certified Fraud Examiner (CFE) and a founding member of the Asia Pacific Chapter of the High Technology Crime Investigation Association.。
    FRED CHAN 担任RISK3顾问咨询责任有限公司(提供证据取证,信息安全审查,电子数据的恢复以及技术监管、统计、测试)经理职位。在2003年加入RISK3有限公司以前,曾供职于一家国际知名风险投资顾问咨询公司担任高管层长达七年,有着丰富的证据统计和计算机取证经验。同时,他还在一家著名国际财务公司负责八年的审计,清算、融资工作。他先后取得了MBA(工商管理)CPA(注册会计师)CFE(企业舞弊查核师)及高科技犯罪调查取证协会亚太地区创始成员之一。

 

 

戴士剑   高级工程师

 

 

 

    戴士剑,湖北南漳人,高级工程师。主要研究方向为信息技术与信息安全,数据恢复研究中心负责人。1999年开始研究数据恢复技术,2003年出版我国第一部数据恢复方面的专著--《数据恢复技术》,版权输出至我们台湾地区;2004年3月被国家信息产业部聘为"数据恢复职业资格认证专家顾问"。其他著作主要有《企业管理建模数据流程图集》、《数据安全与编程技术》等。

 

 

 

 

郑辉   博士        

 

    郑辉,男,1972年生于吉林伊通。2003年获南开大学工学博士学位,主要研究领域为网络与信息安全。现工作单位清华大学信息网络工程研究中心、中国教育与科研计算机网应急响应组,助理研究员。工作内容涉及紧急事件应急响应、漏洞分析、网络攻击与防护、入侵监测、安全审计、计算机取证等各个方面。对Internet蠕虫的防治与应用有较深入的研究,共发表技术论文11篇,参加国家项目及课题研究共9项。

 

 

 

 

张喜平

 
     毕业于中国科学研究院高能物理研究所,从事中科院高能物理研究所网络安全组课题的研究,曾撰写“黑客的常用攻击手段和防范措施”等文章,参与承担科技部九七三课题——“高速网下的数据获取与分析”中数据分析模块的研究任务,现为北京大学博雅方略城市发展与信息化研究中心应急系统顾问专家。

   

 

 

刘欣  博士

 

    北京大学计算机系博士、北京大学软件与微电子学院网络与通信技术系讲师。刘欣博士主要的研究领域是:网络与信息安全、计算机取证、信息系统隐患发现技术。在上述领域作为主要骨干参与了多项国家十五重点科技攻关项目、863项目、国家保密局重点科技攻关项目、及与国信安办、军队、公安部、中国交通中心等单位联合项目的研发工作,并在相关期刊与会议上发表论文多篇。

 

涂彦辉

 

   涂彦晖,金山公司软件工程师,长期从事数据安全相关领域研究,开发有金山数据安全2006、金山文件粉碎机等。在各大IT杂志发表了大量的技术文章,出版有《数据安全与编程技术》(清华大学出版社出版)、《数据恢复技术》(电子工业出版社出版)等著作。 

 

陈虹宇

 

    陈虹宇,信息安全工程师、高级讲师。现就职于国家信息安全成果产业化(四川)基地。曾就职于成都微软技术中心,主要研究方向为黑客入侵与反入侵技术、计算机病毒技术、数据恢复与计算机取证,即将出版《计算机取证技术》。 

 

 


 

中国计算机取证技术研究组

sprite@china-forensic.com