Text and References: There is no specific text for the class. There are however several reference books which you may consult and readings that you have to finish for the class.
Nelson, B., Philips, A.., Enfinger, F., and Steuart, C., Guide to Computer Forensics and Investigations, 2nd Ed., Canada: Thomson Course Technology.
Middleton, B., Cyber Crime Investigator's Field Guide, New York: Auerbach Publications.
Computer forensics is a relatively new field focused on solving computer crime that is an amalgamation of forensics investigative techniques, computer security, and law. Computer forensics is the study of cyber attack reporting, detection, and response by logging malicious activity and gathering court-admissible chains-of-evidence using various forensic tools that are able to trace back the activity of the hackers. The course provides students with training in collection and preserving evidence from computers and networks. Specifically students learn procedures for identification, preservation, and extraction of electronic evidence. Students also gain knowledge in the area of network forensics that covers auditing and investigation of network and host system intrusions, tracing emails, and analyzing Internet fraud. Students learn how to seize a computer from a crime scene without damaging it or risking it becoming inadmissible in a court of law as well as image and mirror hard drives. Specific tools are used for network and computer forensics such as HELIX, Knoppix, PSK, and WinHex editor. EnCase is the most comprehensive and popular tool among law enforcement agencies however it is an expensive tool. Finally, ethics, law, policy, and standards concerning digital evidence are discussed in the class.
PROJECTS AND ASSIGNMENTS
Students will receive in class assignments as well as a take home project/exam which will be due May 13, 2007. For in class assignments forensics software will be loaded on to the computers in the lab or provided to the students on disks. For take home project/exam students would need to install the software on their own computers or on lab computers at the University.
Grading will be 50% class participation/assignments/quizzes and 50% take-home project/exam.