IMF 2009

5th International Conference on
IT Security Incident Management & IT Forensics

September 15th to 17th, 2009
Stuttgart, Germany

Conference of SIG SIDAR
of the German Informatics Society (GI).

Call for Papers

Conference Background

Information and communication technology is more and more becoming an integral and in most cases even a vital part of life. The worldwide economy, public administration, health care, education and even personal life depend on working IT. Constriction of the availability of its service, loss of confidentiality or alteration of data processed, or loss of integrity of the IT infrastructure usually lead to serious or disastrous consequences. Hence security plays an increasingly important role for operators and users of IT systems and infrastructures.

The establishment of static security measures like policies, standards, and guidelines slowly but steadily is getting more common amongst IT operators. Nevertheless in the vast majority of cases operators do not have the capability to detect and respond to security incidents or do a forensic analysis of its traces that can be used in a lawsuit. Jurisdiction in most countries is starting to change and applies regulations on legal duty to maintain safety on operators of IT. Hence incident response capabilities become indispensable to avoid successful assertion of claims for damages caused by compromised or misused systems.

Conference Goals

IMF's intent is to gather experts from throughout the world in order to present and discuss recent technical and methodical advances in the fields of IT security incident response and management and IT forensics. The conference provides a platform for collaboration and exchange of ideas between industry, academia, law-enforcement and other government bodies.

Conference Topics

The scope of IMF 2009 is broad and includes, but is not limited to the following areas:

IT Incident Response

  • Procedures and Methods of Incident Response
  • Formats and Standardization for Incident Response
  • Tools Supporting Incident Response
  • Incident Analysis
  • Sources of Information, Information Exchange, Communities
  • Dealing with Vulnerabilities (Vulnerability Response)
  • Monitoring and Early Warning
  • Education and Training
  • Organizations
  • Legal Aspects (Jurisdiction, Applicable Laws and Regulations)

IT Forensics

  • Trends and Challenges in IT Forensics
  • Techniques, Tools in Procedures IT Forensics
  • Methods for the Gathering, Handling, Processing and Analysis of Digital Evidence
  • Evidence Protection in IT Environments
  • Standardization in IT Forensics
  • Education and Training
  • Organizations
  • Legal Aspects (Jurisdiction, Applicable Laws and Regulations)

Submission Details

IMF invites to submit full papers of up to 20 pages, presenting novel and mature research results as well as practice papers of up to 20 pages, describing best practices, case studies or lessons learned. Proposal for workshops, discussion and presentation on practical methods and challenges are also welcome.

All submissions must be written in English (see below), and either in postscript or PDF format. Authors of accepted papers must ensure that their papers will be presented at the conference.

Submitted full papers must not substantially overlap papers that have been published or that are simultaneously submitted to a journal or a conference with proceedings.

All submissions will be reviewed by the program committee and papers accepted to be presented at the conference will be included in the conference proceedings.

Details on the electronic submission procedure as well as detailed registration information and formatting instructions are provided on the conference web site (


IMF 2009's scope is international hence all submissions must be written in English. Presentations of accepted papers also must be done in English.


Accepted papers will be published by the IEEE Computer Society's Conference Publishing Services. Each participant of the conference will receive a printed copy.

Dates and Deadlines

The deadline for paper submission is June 1st, 2009. Notification of acceptance will be sent on June 22nd, 2009 the latest. You may get your notification earlier than that. Final paper camera ready copy are due to June 26th, 2009.

June 1st, 2009: Deadline for submissions
June 22nd, 2009: Notification of acceptance or rejection
June 26th, 2009: Final paper camera ready copy due
September 15th to 17th, 2009: IMF 2009 Conference

Conference Chair

Dirk Schadt
SPOT Consulting

Program Chair

Oliver Goebel
Universitaet Stuttgart

Organizing Committee

Jack Cole
Ralf Ehlert
Sandra Frings
Oliver Goebel
Detlef Guenther
Holger Morgenstern
Dirk Schadt

Steering Committee

Sandra Frings
Oliver Goebel
Detlef Guenther
Jens Nedon
Dirk Schadt

Program Committee

Susan BrennerUniversity of Dayton, USA
Jack ColeUS Army Research Laboratory, USA
Andrew CormackJANET, UK
Ralf DoerrieGermany
Ralf EhlertUniversitaet Magdeburg, Germany
Felix FreilingUniversitaet Mannheim, Germany
Sandra FringsFraunhofer IAO, Germany
Oliver GoebelUniversitaet Stuttgart, Germany
Detlef GuentherCorporate Internal Audit, Volkswagen AG, Germany
Vijay K. GurbaniBell Labs, USA
Bernhard M. HaemmerliACRIS GmbH, Switzerland
Robert Martin,MITRE Corp., USA
Holger, Germany
Henning PagniaBerufsakademie Mannheim, Germany
Dirk SchadtSPOT, Germany
Albert SchaenzleLandeskriminalamt Baden Wuerttemberg, Germany
Mark SchillerStatton Security Ltd, UK
Andreas SchusterDeutsche Telekom, Germany
Marco ThorbrueggeENISA, EU
Stephen D. WolthusenRoyal Holloway, Univ. of London, UK
Steven W. WoodAlste Technologies GmbH, Germany

Under the Auspices of

German Informatics Society (GI e.V.)
Wissenschaftszentrum Ahrstr. 45, 53175 Bonn, Germany
Tel.: +49 228 302 145, Fax: +49 228 302 167

Special Interest Group SIDAR

In Co-Operation with

IEEE Computer Society
SPOT Consulting
Fraunhofer Institut fuer Arbeitswirtschaft und Organisation IAO
Universitaet Stuttgart, RUS-CERT


We invite interested organizations to serve as sponsors for IMF 2009; please contact the Sponsor Chair, Detlef Guenther, for information regarding corporate sponsorship (