26-27 March 2019

Public Event (Invitations Only)

Hague, the Netherlands


Summary

One of the main EVIDENCE2e-CODEX goals is to produce a 'true to life' working solution by integrating a formal language for representing and supporting the electronic evidence exchange process in an electronic evidence platform based on e-CODEX architecture, i.e. the Evidence Exchange Standard Package (EESP) Application. To achieve this goal, the project team broke down the electronic evidence life cycle in simple phases in order to verify the capacity of the formal language to store the forensic and legal information related to the current status of the evidence: initialization of the case, search and seizure, acquisition, analysis taking into consideration the preservation and the chain of custody. Relying on pseudo-anonymization of real cases, a simulation on how the formalism represents all the involved information was prepared in order to evaluate the strengths and the weakness of the chosen formalism within the EVIDENCE2e-CODEX Project.

EVIDENCE2e-CODEX is currently at the final stages of validating different aspects and functionalities of the EESP Application and the project team sought the opinions and views of both the technical and legal communities over its achievements.

'Meeting the Technical Community: Validation of the Evidence Exchange Standard Package Application' Workshop, a a two-day joint WP3/WP4 event engaging the technical community with the EVIDENCE2e-CODEX achievements and goals, took place on 26-27 March 2019 in The Hague. It was designed around six major topics seeking the feedback from practitioners toward the EESP Application’s validation.

More than 50 experts from the digital justice and forensics community gathered to discuss and network over presentations from project partners and stakeholders. The event opened with a project introduction to the evidence exchange scenario, the benefits of using a standard for evidence representation, the CASE language, and the architecture, API and main functionalities of the EESP Application.

Further on, the workshop was designed around six main discussion topics:

Panel 1.A debated on the functionality and GUI of the EESP Application:

what kind of needs would judicial authorities/practitioners have using the EESP Application in terms of Evidence Package integrity and authenticity checks, opening and/or verifying the Evidence Package content, etc.;

what kind of needs would forensic labs and law enforcement agencies have using the EESP Application with respect to Evidence Package preparation, browsing, encryption, review, etc.;

validation of the EESP use cases designed within the project; etc.

A second discussion (Panel 1.B) was dedicated once more to the EESP Application – this time within the context of the e-Evidence project, developed by the EC, and the potential integration of the EESP Application with other platforms, including issued of exchanging messages, links, automatisms, Evidence Package encryption and manifest file, etc.

The first day finished with two more stakeholders’ discussions over:

the forensic tools that are already able to produce a report compatible with the CASE standard, highlighting a growing awareness and sensibility toward the importance to adopt this language as a standard in the future, and what is the forensic tools software development companies’ perspective on CASE (Panel 2), and

the data protection issues and other concerns of legal nature such as Evidence Package data retention, Evidence Package disposal, the need for special legal grounds the Evidence Exchange Scenario to be accepted in the Member States, etc. (Panel 3).

The second day of the event continued with two sessions dedicated to:

dealing with exchange of large file of evidence (Panel 4); and

a discussion on the other platforms currently in use for purposes of evidence exchange and the issues/solutions that these platforms are experiencing (Panel 5).

Each session was organized around a technical overview and/or demo of the specific features, followed by a panel discussion.

The participation of the major stakeholders in the EU arena helps EVIDENCE2e-CODEX to develop and promote the ‘true to life’ example for electronic evidence exchange. The event welcomed DG Justice and Consumers and e-CODEX representatives, officials from INTERPOL, EUROJUST, EUROPOL, OLAF, International Criminal Court, National Chambers of Judicial Officers, European Judicial Network, and the Ministries of Justice and/or Prosecutor’s Office from Austria, Bulgaria, Estonia, Germany, Italy, Netherlands, Portugal, Spain, as well as experts from digital forensics companies, academia and national/international organizations working in the field of judicial cooperation.

All event presentations are available in the Resources sub-section below.

Full summary of the event and brief on the EVIDENCE2e-CODEX evidence exchange scenario can be found in the event brief.



Venue

The event took place in the premises of the Igluu Den Haag in The Hague, the Netherlands, located at Louis Couperusplein 2, 2514 HP, The Hague, The Netherlands. For the exact location of the venue, visit Google Maps by clicking here.



Agenda

Tuesday, 26 March 2019

08:30 – 09:00

Registration & welcome coffee

09:00 – 09:10

Welcome address on behalf of the Project Coordinator

Fabrizio Turchi, CNR-ITTIG, Italy

Opening speech

Ernst Steigenga, Ministry of Justice and Security, the Netherlands

Evidence Exchange Standard Package (EESP) application

09:10 – 10:30

Evidence Exchange Scenario overview

Fabrizio Turchi, CNR-ITTIG, Italy

09:30 – 10:00

CASE Overview

Harm van Beek, Case Technical Director, Netherlands Forensic Institute, The Netherlands

10:00 – 10:15

Evidence Exchange Standard Package (EESP): where it comes to play, a common timeline

Fabrizio Turchi, CNR-ITTIG, Italy

10:15 – 10:30

EESP Application: Architecture, API and functionalities

Nikolaos Matskanis, CETIC, Belgium

10:30 – 11:10

EESP Demo on a Use Case Scenario (Use Case D or another)

Nikolaos Matskanis, CETIC, Belgium

Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy

11:10 – 11:25

Coffee Break

Panel discussion: EESP Functionalities and GUI issues

11:25 – 12:25

Panel 1.A: EESP - discussion on functionalities and GUI, feedback from potential users

EESP and e-Evidence Exchange System interaction

12:25 – 13:15

Panel 1.B: EESP and e-Evidence - Exchange messages, Link, Automatisms, Evidence Package Encryption and Manifest file

13:15 – 14:15

Lunch

Evidence Package content in details: UCO/CASE language standard overview and future

14:15 – 14:45

Forensic Tools with CASE support: demo

Mattia Epifani, CNR-ITTIG, Italy

14:45 – 15:15

Report tools conversion: caseConverter application

Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy

15:15 – 16:15

Panel 2: Type of Evidences/Traces - Forensics Tools companies and FL/LEA perspective on CASE

16:15 – 16:30

Coffee Break

Platforms for the CA/LEA cooperation: security and exchange

16:30 – 16:45

Data Protection and Fundamental Rights Issues in the Exchange of Electronic Evidence

Nikolaus Forgó, University of Vienna, Austria

16:45 – 18:00

Panel 3: EP retention - for how long should/can the EP be kept both in FL/LEA and CA systems information cases?

  • EP disposal: how should the EP be disposed of?
  • Evidence Exchange legal grounds
18:00

Brief wrap-up of the first day

19:30

Social Dinner @ Dok28

Doctor Lelykade 28, 2583 CM Den Haag


Wednesday, 27 March 2019

09:00 – 09:15

Summary of the first day and main aim of the second day workshop

Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy

Nikolaos Matskanis, CETIC, Belgium

Exchange of Large File of Evidence issues and possible solutions

09:15 – 09:45

Scenario A: use of a temporary storage area under CA responsibility

Scenario B: direct communication between two LEAs (under CA control?)

Fabrizio Turchi, CNR-ITTIG, Italy

09:45 – 10:45

Panel 4: Exchange of large file of Evidence, how to deal with this issue?

10:45 – 11:15

Coffee Break

Panel discussion: Evidence Package management - legal and technical issues and possible solutions

11:15 – 12:15

Panel 5: Other platforms in use for the Evidence Exchange - INTERPOL I-24/7, EUROPOL SIENA, NFI HANSKEN

12:15 – 12:30

Conclusions

Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy

Nikolaos Matskanis, CETIC, Belgium



Resources

Panel 4: Exchange of large file of Evidence, how to deal with this issue?
pdf, 1.2 MB
Panel 5: Presentation of EUROPOL SIENA
pdf, 1.2 MB
Panel 5: Presentation of examples of using CASE in Forensic Methods
pdf, 623 KB
Panel 5: Other platforms in use for the Evidence Exchange - INTERPOL I-24/7, EUROPOL SIENA, NFI HANSKEN
pdf, 1.2 MB
Panel 3: EP retention - for how long should/can the EP be kept both in FL/LEA and CA systems information cases?
pdf, 1.2 MB
'Data Protection and Fundamental Rights Issues in the Exchange of Electronic Evidence' Presentation by Nikolaus Forgó, University of Vienna, Austria
pdf, 1.2 MB
Panel 2: Type of Evidences/Traces - Forensics Tools companies and FL/LEA perspective on CASE
pdf, 1.2 MB
'Report tools conversion: caseConverter application' Presentation by Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy
pdf, 1.9 MB
'Forensic Tools with CASE support: demo' Presentation by Mattia Epifani, CNR-ITTIG, Italy
pdf, 22 MB
Panel 1.B: EESP and e-Evidence - Exchange messages, Link, Automatisms, Evidence Package Encryption and Manifest file
pdf, 1.7 MB
Panel 1.A: EESP - discussion on functionalities and GUI, feedback from potential users
pdf, 1.5 MB
'EESP Application: Architecture, API and functionalities' Presentation and Demo by Nikolaos Matskanis, CETIC, Belgium
pdf, 2 MB
'Evidence Exchange Standard Package (EESP): where it comes to play, a common timeline' Presentation by Fabrizio Turchi, CNR-ITTIG, Italy
pdf, 1.3 MB
'CASE Overview' Presentation by Harm van Beek, Case Technical Director, Netherlands Forensic Institute, The Netherlands
pdf, 968 KB
'Evidence Exchange Scenario overview' Presentation by Fabrizio Turchi, CNR-ITTIG, Italy
pdf, 2.3 MB
Agenda
pdf, 747 KB
EVIDENCE2e-CODEX Brochure
pdf, 191 KB

Photos