Summary
One of the main EVIDENCE2e-CODEX goals is to produce a 'true to life' working solution by integrating a formal language for representing and supporting the electronic evidence exchange process in an electronic evidence platform based on e-CODEX architecture, i.e. the Evidence Exchange Standard Package (EESP) Application. To achieve this goal, the project team broke down the electronic evidence life cycle in simple phases in order to verify the capacity of the formal language to store the forensic and legal information related to the current status of the evidence: initialization of the case, search and seizure, acquisition, analysis taking into consideration the preservation and the chain of custody. Relying on pseudo-anonymization of real cases, a simulation on how the formalism represents all the involved information was prepared in order to evaluate the strengths and the weakness of the chosen formalism within the EVIDENCE2e-CODEX Project.
EVIDENCE2e-CODEX is currently at the final stages of validating different aspects and functionalities of the EESP Application and the project team sought the opinions and views of both the technical and legal communities over its achievements.
'Meeting the Technical Community: Validation of the Evidence Exchange Standard Package Application' Workshop, a a two-day joint WP3/WP4 event engaging the technical community with the EVIDENCE2e-CODEX achievements and goals, took place on 26-27 March 2019 in The Hague. It was designed around six major topics seeking the feedback from practitioners toward the EESP Application’s validation.
More than 50 experts from the digital justice and forensics community gathered to discuss and network over presentations from project partners and stakeholders. The event opened with a project introduction to the evidence exchange scenario, the benefits of using a standard for evidence representation, the CASE language, and the architecture, API and main functionalities of the EESP Application.
Further on, the workshop was designed around six main discussion topics:
Panel 1.A debated on the functionality and GUI of the EESP Application:
what kind of needs would judicial authorities/practitioners have using the EESP Application in terms of Evidence Package integrity and authenticity checks, opening and/or verifying the Evidence Package content, etc.;
what kind of needs would forensic labs and law enforcement agencies have using the EESP Application with respect to Evidence Package preparation, browsing, encryption, review, etc.;
validation of the EESP use cases designed within the project; etc.
A second discussion (Panel 1.B) was dedicated once more to the EESP Application – this time within the context of the e-Evidence project, developed by the EC, and the potential integration of the EESP Application with other platforms, including issued of exchanging messages, links, automatisms, Evidence Package encryption and manifest file, etc.
The first day finished with two more stakeholders’ discussions over:
the forensic tools that are already able to produce a report compatible with the CASE standard, highlighting a growing awareness and sensibility toward the importance to adopt this language as a standard in the future, and what is the forensic tools software development companies’ perspective on CASE (Panel 2), and
the data protection issues and other concerns of legal nature such as Evidence Package data retention, Evidence Package disposal, the need for special legal grounds the Evidence Exchange Scenario to be accepted in the Member States, etc. (Panel 3).
The second day of the event continued with two sessions dedicated to:
dealing with exchange of large file of evidence (Panel 4); and
a discussion on the other platforms currently in use for purposes of evidence exchange and the issues/solutions that these platforms are experiencing (Panel 5).
Each session was organized around a technical overview and/or demo of the specific features, followed by a panel discussion.
The participation of the major stakeholders in the EU arena helps EVIDENCE2e-CODEX to develop and promote the ‘true to life’ example for electronic evidence exchange. The event welcomed DG Justice and Consumers and e-CODEX representatives, officials from INTERPOL, EUROJUST, EUROPOL, OLAF, International Criminal Court, National Chambers of Judicial Officers, European Judicial Network, and the Ministries of Justice and/or Prosecutor’s Office from Austria, Bulgaria, Estonia, Germany, Italy, Netherlands, Portugal, Spain, as well as experts from digital forensics companies, academia and national/international organizations working in the field of judicial cooperation.
All event presentations are available in the Resources sub-section below.
Full summary of the event and brief on the EVIDENCE2e-CODEX evidence exchange scenario can be found in the event brief.
Venue
The event took place in the premises of the Igluu Den Haag in The Hague, the Netherlands, located at Louis Couperusplein 2, 2514 HP, The Hague, The Netherlands. For the exact location of the venue,
visit Google Maps by clicking here.
Agenda
Tuesday, 26 March 2019
08:30 – 09:00 |
Registration & welcome coffee |
09:00 – 09:10 |
Welcome address on behalf of the Project Coordinator Fabrizio Turchi, CNR-ITTIG, Italy Opening speech Ernst Steigenga, Ministry of Justice and Security, the Netherlands |
Evidence Exchange Standard Package (EESP) application |
|
09:10 – 10:30 |
Evidence Exchange Scenario overview Fabrizio Turchi, CNR-ITTIG, Italy |
09:30 – 10:00 |
CASE Overview Harm van Beek, Case Technical Director, Netherlands Forensic Institute, The Netherlands |
10:00 – 10:15 |
Evidence Exchange Standard Package (EESP): where it comes to play, a common timeline Fabrizio Turchi, CNR-ITTIG, Italy |
10:15 – 10:30 |
EESP Application: Architecture, API and functionalities Nikolaos Matskanis, CETIC, Belgium |
10:30 – 11:10 |
EESP Demo on a Use Case Scenario (Use Case D or another) Nikolaos Matskanis, CETIC, Belgium Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy |
11:10 – 11:25 |
Coffee Break |
Panel discussion: EESP Functionalities and GUI issues |
|
11:25 – 12:25 |
Panel 1.A: EESP - discussion on functionalities and GUI, feedback from potential users |
EESP and e-Evidence Exchange System interaction |
|
12:25 – 13:15 |
Panel 1.B: EESP and e-Evidence - Exchange messages, Link, Automatisms, Evidence Package Encryption and Manifest file |
13:15 – 14:15 |
Lunch |
Evidence Package content in details: UCO/CASE language standard overview and future |
|
14:15 – 14:45 |
Forensic Tools with CASE support: demo Mattia Epifani, CNR-ITTIG, Italy |
14:45 – 15:15 |
Report tools conversion: caseConverter application Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy |
15:15 – 16:15 |
Panel 2: Type of Evidences/Traces - Forensics Tools companies and FL/LEA perspective on CASE |
16:15 – 16:30 |
Coffee Break |
Platforms for the CA/LEA cooperation: security and exchange |
|
16:30 – 16:45 |
Data Protection and Fundamental Rights Issues in the Exchange of Electronic Evidence Nikolaus Forgó, University of Vienna, Austria |
16:45 – 18:00 |
Panel 3: EP retention - for how long should/can the EP be kept both in FL/LEA and CA systems information cases?
|
18:00 |
Brief wrap-up of the first day |
19:30 |
Social Dinner @ Dok28 Doctor Lelykade 28, 2583 CM Den Haag |
Wednesday, 27 March 2019
09:00 – 09:15 |
Summary of the first day and main aim of the second day workshop Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy Nikolaos Matskanis, CETIC, Belgium |
Exchange of Large File of Evidence issues and possible solutions | |
09:15 – 09:45 | Scenario A: use of a temporary storage area under CA responsibility Scenario B: direct communication between two LEAs (under CA control?) Fabrizio Turchi, CNR-ITTIG, Italy |
09:45 – 10:45 | Panel 4: Exchange of large file of Evidence, how to deal with this issue? |
10:45 – 11:15 | Coffee Break |
Panel discussion: Evidence Package management - legal and technical issues and possible solutions | |
11:15 – 12:15 | Panel 5: Other platforms in use for the Evidence Exchange - INTERPOL I-24/7, EUROPOL SIENA, NFI HANSKEN |
12:15 – 12:30 | Conclusions Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy Nikolaos Matskanis, CETIC, Belgium |
Resources
- Panel 4: Exchange of large file of Evidence, how to deal with this issue?
- pdf, 1.2 MB
- Panel 5: Presentation of EUROPOL SIENA
- pdf, 1.2 MB
- Panel 5: Presentation of examples of using CASE in Forensic Methods
- pdf, 623 KB
- Panel 5: Other platforms in use for the Evidence Exchange - INTERPOL I-24/7, EUROPOL SIENA, NFI HANSKEN
- pdf, 1.2 MB
- Panel 3: EP retention - for how long should/can the EP be kept both in FL/LEA and CA systems information cases?
- pdf, 1.2 MB
- 'Data Protection and Fundamental Rights Issues in the Exchange of Electronic Evidence' Presentation by Nikolaus Forgó, University of Vienna, Austria
- pdf, 1.2 MB
- Panel 2: Type of Evidences/Traces - Forensics Tools companies and FL/LEA perspective on CASE
- pdf, 1.2 MB
- 'Report tools conversion: caseConverter application' Presentation by Mattia Epifani, Fabrizio Turchi, CNR-ITTIG, Italy
- pdf, 1.9 MB
- 'Forensic Tools with CASE support: demo' Presentation by Mattia Epifani, CNR-ITTIG, Italy
- pdf, 22 MB
- Panel 1.B: EESP and e-Evidence - Exchange messages, Link, Automatisms, Evidence Package Encryption and Manifest file
- pdf, 1.7 MB
- Panel 1.A: EESP - discussion on functionalities and GUI, feedback from potential users
- pdf, 1.5 MB
- 'EESP Application: Architecture, API and functionalities' Presentation and Demo by Nikolaos Matskanis, CETIC, Belgium
- pdf, 2 MB
- 'Evidence Exchange Standard Package (EESP): where it comes to play, a common timeline' Presentation by Fabrizio Turchi, CNR-ITTIG, Italy
- pdf, 1.3 MB
- 'CASE Overview' Presentation by Harm van Beek, Case Technical Director, Netherlands Forensic Institute, The Netherlands
- pdf, 968 KB
- 'Evidence Exchange Scenario overview' Presentation by Fabrizio Turchi, CNR-ITTIG, Italy
- pdf, 2.3 MB
- Agenda
- pdf, 747 KB
- EVIDENCE2e-CODEX Brochure
- pdf, 191 KB
Photos