Main Page

Welcome to Simson Garfinkel's web site.

Simson L. Garfinkel is an Associate Professor at the Naval Postgraduate School in Monterey, California. His research interests include computer forensics, the emerging field of usability and security, personal information management, privacy, information policy and terrorism. (Read full bio.)

Recent and Upcoming Tutorials and Presentations

• 2013-01-18 MIT IAP, Building E17, 10am — Digital Forensics Innovation: Searching A Terabyte of Data in 10 minutes
• 2013-01-07 — DCACM (Washington DC)— Digital Forensics Innovation: Searching A Terabyte of Data in 10 minutes
• 2012-10-01 Harvard University—Digital Forensics Innovation: Searching A Terabyte of Data in 10 minutes

See also my Presentations Archive

Working Papers

Here are working and draft papers relevant to some of the topics in my talks:

• bulk_extractor (working paper)

Recent Publications

You may find these articles interesting:

Academic

1. Garfinkel, S. Digital Forensics XML and the DFXML toolset, Digital Investigation, 2012.
2. Garfinkel, S., and Dinolt, G. Operations with Degraded Security. IEEE Security & Privacy, pages 18–23, November/December 2011
3. Beverly, Robert, Simson Garfinkel and Greg Cardwell, "Forensic Carving of Network Packets and Associated Data Structures", DFRWS 2011, Aug. 1-3, 2011, New Orleans, LA BEST PAPER AWARD (Acceptance rate: 23%, 14/62)

Journalistic

• Seven Ways to get yourself hacked, Technology Review, December 15, 2011.

Current Research Automated Computer Forensics Sub-Linear Drive Analysis The Real Data Corpus: Building an unclassified research corpora of disk images from around the world. Human Subject Data and computer security research Digitally Signed Do-Not-Reply Email You can find a complete list of my research on my Research page.

Teaching I have currently teaching: Fall 2012 - CS3690 - Network Security I have recently taught: Fall 2010 - CS4920 - Automated Computer Forensics Summer 2011 - CS3636 - Data Fusion with Online Information You may also be interested in the complete list of courses I have taught.

Current Projects Software and systems: tcpflow, a TCP/IP session reassembler. bulk_extractor, a high-speed feature extractor Digital Forensics XML. The Forensics Wiki. I founded this wiki, monitor it, and occasionally contribute. Writing: I regularly contribute to MIT's Technology Review. I am an associate editor at Computers & Security I actively supervise: regxml_extractor, a tool for converting Windows Registry files to XML and SQLite databases. You may also be interested in my Future Projects, especially if you are looking for ideas.

Completed Projects NeXTWORLD Magazine (1991--1993) SBook5, a free-format address book for MacOS. (1991--2006) 10 Spring Street, Vineyard Haven, Virtual Tour (1995) Agenda, an early conference scheduling app for PalmOS. (2001) Stream, an opportunistic encryption proxy. (2003) Print your own notepaper (2003, but it still works!) Updated MediaWiki BibText Extension (2007) docx_steg Tools for hiding information in docx files and printing their contents (2008)

Useful Resources Current Toolset -- The tools that I use in my research Open Source Computer Science Books -- A good list How to search the computer science literature Mac Resources LaTeX Resources Python Resources Web Resources Windows Resources XML Resources SEED: Developing Instructional Laboratories for Computer SEcurity EDucation

Where to find me online Articles in Technology Review ACM Digital Library Author Profile Or just click: Official ACM Publications DBLP Profile LinkedIn Profile Citeulike Profile ForensicsWiki User Page Wikipedia Article on Simson Garfinkel Amazon.com Listmania! Lists

---

Other sites of interest

• http://ex.nitroba.org --- All that's left of Deus Ex Machina Software now that we sold the ex.com domain.
• http://dmr.nitroba.org --- Donald M. Rosenbergs online site (his papers are at the Michigan State University Archives).
• http://realworlddocs.com --- My fathers newly published book on document drafting.
• http://forensicwiki.org --- Wiki for computer forensics