IMF 2013

7th International Conference on
IT Security Incident Management & IT Forensics

March 12th - 14th, 2013
Nuremberg (Nürnberg), Germany

Conference of SIG SIDAR
of the German Informatics Society (GI).

Call for Papers

Conference Background

Today IT security is an integral aspect in operating IT-Systems. Yet, despite high-end precautionary measures taken, not every attack or security mishap can be prevented and hence incidents will go on happening. In such cases forensic capabilities in investigating incidents in both technical and legal aspects are paramount. Thus, capable incident response and forensic procedures have gained essential relevance in IT infrastructure operations and there is ample need for research and standardization in this area.

In law enforcement IT forensics is an important branch and its significance constantly increases since IT has become an essential part in almost every aspect of daily life. IT systems produce traces and evidence in many ways that play a more and more relevant role in resolving cases.

Conference Goals

The IMF conference provides a platform for experts from throughout the world to present and discuss recent technical and methodical advances in the fields of IT security incident response and management and IT forensics. It shall enable collaboration and exchange of ideas between industry (both as users and solution providers), academia, law- enforcement and other government bodies.

Conference Topics

The scope of IMF 2013 is broad and includes, but is not limited to the following areas:

IT Security Incident Response

  • Incident Response Procedures and Methods
  • Incident Response Formats and Standardization
  • Tools Supporting Incident Response
  • Incident Analysis
  • Information Sources, Information Exchange, Communities
  • Dealing with Vulnerabilities (Vulnerability Response)
  • Monitoring and Early Warning
  • Incident Response in Non-Standard Environments (e.g. Embedded Systems)
  • Education and Training
  • Organizations
  • Legal and Enterprise Aspects (Jurisdiction, Applicable Laws and Regulations)

IT Forensics

  • Trends and Challenges in IT Forensics
  • Application of forensic techniques in new areas
  • Techniques, Tools in Procedures IT Forensics
  • Methods for the Gathering, Handling, Processing and Analysis of Digital Evidence
  • Evidence Protection in IT Environments
  • IT Forensics in Non-Standard Environments (e.g. Embedded Systems)
  • Source-Determination and Manipulation Detection (e.g. Multimedia Forensics)
  • Standardization in IT Forensics
  • Education and Training
  • Organizations
  • Legal and Enterprise Aspects (Jurisdiction, Applicable Laws and Regulations)

Submission Details

IMF invites to submit full papers of up to 20 pages, presenting novel and mature research results as well as practice papers, describing best practices, case studies or lessons learned of up to 20 pages. Proposals for workshops, discussions and presentations on practical methods and challenges are also welcome.

Please submit your paper here.

You will find the submission guidelines here.

All submissions must be written in English (see below), and either in postscript or PDF format. Submissions must be anonymised. Authors of accepted papers must ensure that their papers will be presented at the conference. Submitted full papers must not substantially overlap papers that have been published elsewhere or that are simultaneously submitted to a journal or a conference with proceedings.

All submissions will be reviewed by the program committee and papers accepted to be presented at the conference will be included in the conference proceedings.


IMF 2013's scope is international hence all submissions must be written in English. Presentations of accepted papers also must be done in English.


Accepted papers will be published by the IEEE Computer Society's Conference Publishing Services. Each participant of the conference will receive a printed copy.

Dates and Deadlines

exceeded: Deadline for submissions (extended to October 29th,2012)
December 12th, 2012: Notification of acceptance or rejection
January 11th, 2013: Due date for final camera ready copies
March 12th through 14th, 2013: IMF 2013 Conference

Conference Chair

Felix Freiling
Friedrich-Alexander-Universitaet Erlangen-Nuernberg

Program Chair

Holger Morgenstern
IT Expert Witness,

Sponsor Chair

Organizing Committee

Ralf Ehlert
Felix Freiling
Sandra Frings
Oliver Goebel
Detlef Guenther
Stefan Kiltz
Holger Morgenstern
Jens Nedon
Dirk Schadt

Programm Committee

Rafael Accorsi, Universitaet Freiburg, Germany
Harald Baier, Hochschule Darmstadt/CASED, Germany
Davide Balzarotti, Institut Eurecom, France
Herbert Bos, VU Amsterdam, Netherlands
Susan Brenner, University of Dayton, USA
Levente Buttyan, TU Budapest/CRYSYS, Hungary
Jack Cole, US Army Research Laboratory, USA
Andrew Cormack, JANET, UK
Ralf Ehlert, Universitaet Magdeburg, Germany
Felix Freiling, Friedrich-Alexander-University (FAU), Germany
Sandra Frings, Fraunhofer IAO, Germany
Pavel Gladyshev, UCD, Ireland
Oliver Goebel, Universitaet Stuttgart, Germany
Bernd Grobauer, Siemens CERT, Germany
Detlef Günther, Volkswagen AG, Germany
Vijay Gurbani, Bell Labs, USA
Daniel Hammer, Hochschule Offenburg, Germany
Bernhard Hämmerli, ACRIS GmbH, Switzerland
Stefan Kiltz, Universitaet Magdeburg, Germany
Lam Kwok, PrivyLink International Ltd, Singapore
Jim Lyle, NIST, USA
Bob Martin, MITRE Corp., USA
Ralf Moll, LKA Baden-Wuerttemberg, Germany
Holger Morgenstern,, Germany
Jens Nedon, IABG mbH, Germany
Dirk Schadt, SPOT, Germany
Mark Schiller, Statton Security Ltd, UK
Marko Schuba, FH Aachen, Germany
Andreas Schuster, Deutsche Telekom, Germany
Asia Slowinska, VU Amsterdam, Netherlands
Marco Thorbrügge, ENISA, EU
Stephen Wolthusen, Royal Holloway, Univ. of London, UK

Steering Committee

Sandra Frings
Oliver Goebel
Detlef Guenther
Holger Morgenstern
Jens Nedon
Dirk Schadt

Under the Auspices of

German Informatics Society (GI e.V.)
Wissenschaftszentrum Ahrstr. 45, 53175 Bonn, Germany Tel.: +49 228 302 145, Fax: +49 228 302 167

Special Interest Group SIDAR

Supported by

Fraunhofer Institut fuer Arbeitswirtschaft und Organisation IAO
SPOT Consulting
Universitaet Stuttgart, RUS-CERT

In Co-Operation with

ENISA - European Network and information Security Agency


We invite interested organizations to serve as sponsors for IMF 2013; please contact the organization committee at (


Hilton Hotel
Valznerweiherstraße 200
90480 Nuremberg