Computer Forensics: an Introduction

Introduction

This course provides a general and practical introduction to Computer Forensics and related investigative techniques.

Target : CS & IT Honours Students.

Semester : 2

Unit value : 3

Contact hours : 6-12 open-discussion style lectures, each of 1-2 hours duration

Prerequisites : 12 units 3000-level COMP courses

Assumed knowledge : a working knowledge of UNIX/LINUX, a basic knowledge of computer networking (e.g. COMP3400 or COMP3310)

Content :

• Overview of Forensic analysis
• Legal aspects - evidence, privacy issues
• Analysing email and usenet messages
• Geo-location
• Determining the public profile
• Data recovery & File analysis
• Document analysis and authorship attribution

Learning objectives :

• Gain a general appreciation of computer forensics and related investigative techniques.
• Be able to investigate simple cases using appropriate forensic techniques.

Assessment :

Participation	20%
Assignment	40%
Essay/Report	40%

Text : none.