Course detail
Digital Forensics (in English)
FIT-DFAaAcad. year: 2019/2020
The course focuses on the role of computer forensics and the methods used in the investigation of computer crimes. The course explains the need for proper investigation and illustrates the process of locating, handling, and processing computer evidence. A detailed explanation of how to efficiently manage a forensics investigation and how to preserve and present evidence is covered.
Supervisor
Department
Learning outcomes of the course unit
Student acquaints basic concepts and principles of computer forensics and skills in a computer forensic examination.
Prerequisites
Basic knowledge of operating systems, storage media, networking and ability to write simple scripts.
Co-requisites
Not applicable.
Recommended optional programme components
Not applicable.
Recommended or required reading
Nelson, B, Phillips, A, Enfinger, F, Stuart, C: Guide to Computer Forensics and Investigations, 2nd Ed, Thomson Course Technology, 2006, ISBN: 0-619-21706-5
Vacca, J: Computer Forensics, Computer Crime Scene Investigation, 2nd Ed, Charles River Media, 2005.
Buchanan, W, J: Introduction to Security and Network Forensics, Taylor and Francis, Auerbach Publications, 2011.
Davidoff, S, Ham, J: Network Forensics: Tracking Hackers through Cyberspace, Prentice Hall, 2012.
Planned learning activities and teaching methods
Not applicable.
Assesment methods and criteria linked to learning outcomes
- Earning at least 20 points during the term is required.
- Minimum of 20 points of the final exam is necessary to pass the course.
Language of instruction
English
Work placements
Not applicable.
Aims
The aim is to understand principles of computer forensics and the basic concepts used in a computer forensics examination; introduces techniques required for conducting a forensic analysis of systems and data.
Specification of controlled education, way of implementation and compensation for absences
Controlled activities include a project, computer exercises and the final exam. Missed labs will not be replaced.
Classification of course in study plans
- Programme IT-MGR-2 Master's
branch MBI , any year of study, summer semester, 5 credits, optional
branch MPV , any year of study, summer semester, 5 credits, optional
branch MGM , any year of study, summer semester, 5 credits, optional - Programme IT-MGR-2 Master's
branch MGMe , any year of study, summer semester, 5 credits, compulsory-optional
- Programme IT-MGR-2 Master's
branch MSK , any year of study, summer semester, 5 credits, optional
branch MIS , any year of study, summer semester, 5 credits, optional
branch MBS , any year of study, summer semester, 5 credits, optional
branch MIN , any year of study, summer semester, 5 credits, optional
branch MMI , any year of study, summer semester, 5 credits, optional
branch MMM , any year of study, summer semester, 5 credits, optional - Programme MITAI Master's
specialization NADE , any year of study, summer semester, 5 credits, optional
specialization NBIO , any year of study, summer semester, 5 credits, optional
specialization NGRI , any year of study, summer semester, 5 credits, optional
specialization NNET , any year of study, summer semester, 5 credits, optional
specialization NVIZ , any year of study, summer semester, 5 credits, optional
specialization NCPS , any year of study, summer semester, 5 credits, optional
specialization NSEC , any year of study, summer semester, 5 credits, optional
specialization NEMB , any year of study, summer semester, 5 credits, optional
specialization NHPC , any year of study, summer semester, 5 credits, optional
specialization NISD , any year of study, summer semester, 5 credits, optional
specialization NIDE , any year of study, summer semester, 5 credits, optional
specialization NISY , any year of study, summer semester, 5 credits, optional
specialization NMAL , any year of study, summer semester, 5 credits, optional
specialization NMAT , any year of study, summer semester, 5 credits, optional
specialization NSEN , any year of study, summer semester, 5 credits, optional
specialization NVER , any year of study, summer semester, 5 credits, optional
specialization NSPE , any year of study, summer semester, 5 credits, optional - Programme IT-MGR-1H Master's
branch MGH , any year of study, summer semester, 5 credits, recommended
Type of course unit
Lecture
26 hours, optionally
Teacher / Lecturer
Syllabus
- Introduction to Forensics Investigation
- Data Acquisition Tools and Methods
- Computer Forensics Tools
- Data Recovery, Filesystem Examination
- Data Analysis, Carving, Recovery Files
- OS Forensics: Windows, Mac OS, Linux
- Introduction to Mobile Forensics
- Mobile Forensics Data Acquisition and Analysis
- Network Traffic Capturing and Processing
- Network Data Analysis
- Network Device Forensics
- IoT Forensics
- Cryptocurrencies
Laboratory exercise
12 hours, compulsory
Teacher / Lecturer
Syllabus
- Disk Imaging and Data Acquisition
- Digital Forensics using Autopsy
- Mobile data acquisition and analysis using MobilEdit
- Network Forensics using Wireshark
- Network Forensics: Flow and Log Analysis
- Digital Forensics of Cryptocurrencies
Project
14 hours, compulsory
Teacher / Lecturer
Syllabus
Performing the investigation of the selected cases. Solving the cases and writing the report.
eLearning
eLearning: opened course