Skip to content

CS Department Colloquium Series Presents Prof. Brendan Saltaformaggio

CS Department Colloquium Series Presents

 “Convicted by Memory: Recovering Spatial-Temporal Digital Evidence from Memory Images”

 Professor Brendan Saltaformaggio
Georgia Institute of Technology

Assistant Professor in the School of Electrical and Computer Engineering


Memory forensics is becoming a crucial capability in modern cyber forensic investigations. In particular, memory forensics can reveal “up to the minute” evidence of a device’s usage, often without requiring a suspect’s password to unlock the device, and it is oblivious to any persistent storage encryption schemes. Prior to my work, researchers and investigators alike considered raw data-structure recovery the ultimate goal of memory forensics. This, however, was far from sufficient as investigators were still largely unable to understand the content of the recovered evidence; hence, unlocking the true potential of such evidence in memory images remained an open research challenge.


Dr. Brendan Saltaformaggio is an Assistant Professor in the School of Electrical and Computer Engineering at Georgia Tech, with a courtesy appointment in the School of Computer Science. His research interests lie in computer systems security, cyber forensics, and the vetting of untrusted software. Dr. Saltaformaggio’s work has been profiled by technical and mass media outlets and has received a Best Student Paper Award from Usenix Security and a Best Paper Award from ACM CCS, both top-tier cyber security venues. Originally from New Orleans, Dr. Saltaformaggio earned his B.S. with Honors in Computer Science from the University of New Orleans in 2012. He received his M.S. and Ph.D. in Computer Science at Purdue University in 2014 and 2016, respectively, where he was honored with two fellowships: the 2016 Symantec Research Labs Graduate Fellowship and the inaugural Emil Stefanov Memorial Fellowship in Computer Science.

Date: Tuesday, November 7th, 2017

Time: 11:00 am to 12:00pm

Location: ECSS 4.910 Alan Turing Conference Room