Subject: SEN1 Meeting tomorrow, Jeroen van den Bos From: Bas Basten To: sen1-list Date: Wed, 30 Mar 2011 13:16:06 +0200 (CEST) Dear all, At tomorrow's SEN1 meeting it's Jeroen's turn to give a talk. His talk will be a try out for an upcoming conference talk (ICSE 2011). Because of this it will only be about 20-25 minutes. Title: Bringing Domain-Specific Languages to Digital Forensics (joint work with Tijs van der Storm) Abstract: Digital forensics investigations often consist of analyzing large quantities of data. The software tools used for analyzing such data are constantly evolved to cope with a multiplicity of versions and variants of data formats. This process of customization is time consuming and error prone. To improve this situation we present DERRIC, a domain-specific language (DSL) for declaratively specifying data structures. This way, the specification of structure is separated from data processing. The resulting architecture encourages customization and facilitates reuse. It enables faster development through a division of labour between investigators and software engineers. We have performed an initial evaluation of DERRIC by constructing a data recovery tool. This so-called carver has been automatically derived from a declarative description of the structure of JPEG files. We compare it to existing carvers, and show it to be in the same league both with respect to recovered evidence, and runtime performance. As usual, we start at 10am in room L016. See you all there! Cheers, Bas