|
Saint Xavier University |
ACSG 591
DIGITAL FORENSICS |
|
| |
| Faculty Info: |
Jim Aman, Ph.D.
Associate Professor of Computer Science
WAC - N326
Office: (773) 298-3454
Skype: jimaman (voice/text)
Virtual Room: vRoom
|
Office Hours: |
| |
Tues-Thurs, 1-3 p.m. Other times by appointment -- or just drop by the office, use Skype, or connect to the vRoom! |
| Course Info: |
|
|
Guide to Computer Forensics and Investigations (3rd Ed.)
Nelson, Phillips, Enfinger, & Steuart
Thomson/Course Technology, 2008
978-1-4180-6733-5
1-4180-6733-4 |
| |
|
This course introduces students to the techniques and tools of computer forensics investigations. Students will receive step-by-step explanations on how to use the most popular forensic tools. Topics include coverage of the latest technology including PDAs, cell phones, and thumb drives. Many hands-on activities are included, which allow students to practice skills as they are learned.
Course Syllabus
The syllabusis available for download. Sections of the syllabus are included on this page.
This is a 4.5-semester-hour course, including a 0.5-hourr e-portfolio component. The target audience is graduate students in the Master of Applied Computer Science program.
Capsule Description
What is actually on a digital storage device? More interesting question: How do you get to all that stored data? Digital forensics addresses these two questions. The course studies the equipment, software, and procedures for obtaining and analyzing digital information from a variety of media. This information may be used as evidence in cases of a civil, criminal, or administrative
nature so techniques for preserving the integrity of the evidence and of the processes of evaluation and reporting are also studied.
Philosophy
We live in an increasingly-digital world. Technological advances always invite increased suspicious activities, whether of a criminal or civil nature. When these activities are uncovered or suspected, people trained in the techniques for discovering, analyzing, and reporting on them are needed. Furthermore, knowledge of these techniques is added value for an individual's resume' and an asset to an employer.
Objectives
| The student who has mastered the material will
... |
-
Students will understand the concepts related to each topic in the course schedule
- Students will demonstrate the skills, practices, and procedures appropriate to each topic
- Students will understand and apply the ethical standards required of a digital forensics examiner
|
Teaching Methods
- Lectures and Demonstrations:
- Projects and lab exercises
- Quizzes and exams
E-Portfolio
- Internet Support: Check Blackboard and
the class web page for additional information about the course.
Blackboard will be the primary Internet tool of the course
and will be used by the instructor to post assignments and
occasionally by the students to post their work.
|
|
|
| Policies: |
- Attendance:
Timely attendance at, preparation for, and participation in each class session is an absolute expectation in graduate school.
- Missed Classes:
Attendance is a consideration in your course grade. If you must miss a class, get notes from someone. If you know you will miss a class, be prepared to submit any assigned work ahead of time.
- Assignments: All assignments are due at the beginning of
class on the announced or published date due. Late submission of assignments
will be assessed a penalty of 10% per day. No exceptions
will be made.
The latest date for submitting any work in this course is the last class meeting day. Incompletes will be issued only in exceptional circumstances.
- Examinations:
All examinations will be comprehensive and closed-book unless specifically noted otherwise by the instructor. The final examination will be given only at the published date and time (see schedule, below).
- Make-up Exams:
 |
Except in exceptional circumstances, makeup tests will not be administered. In no case will unannounced quizzes be readministered. |
- Academic Dishonesty: Plagiarism and cheating are serious
offenses and may be punished by failure on exam, paper, or
project; failure in course; and/or expulsion from the University.
For more information, refer to the Graduate Catalog.
- Need for Assistance: If you have any condition, such as
a physical or learning disability, which will make it difficult
for you to carry out the work as outlined here, or which
will require academic accommodations, you must follow the
University’s established policy for documenting the
condition through the Learning Center. You should also notify
me as soon as possible.
- Posting of Grades: Final grades will not be
posted in Blackboard by the instructor. Progress of grades may be followed
on Blackboard.
Final grades will be available on CLAWS.
|
|
| Grading: |
| Midterm & Final exams ............ |
40% |
| Quizzes ........................................ |
15% |
| E-Portfolio ................................... |
35% |
| Participation ............................... |
10% |
|
| E-Portfolio: |
Students will obtain a small notebook for use as a lab notebook. They will keep notes on the results of Review questions and Hands-On Projects at the end of each chapter in the text. This notebook will be reviewed periodically throughout the course. They may be reclaimed from the instructor after the course ends. |
| Schedule: |
|
Schedule
|
DATE |
TOPICS |
READINGS
|
|
Jan 13 |
Introduction
The Profession |
Read Ch 1 before class! |
|
Jan 20 |
Computer Investigations |
Chapter 2 |
|
Jan 27 |
Office and Laboratory Setup
Ethics
|
Chapter 3
Chapter 16 **** |
|
Feb 3 |
Data Acquisition |
Chapter 4 |
|
Feb 10 |
Processing Scenes
|
Chapter 5 |
|
Feb 17 |
Windows and DOS Systems
- ONLINE! NO CLASS MTG
|
Chapter 6 |
|
Feb 24 |
ONLINE DAY - NO CLASS MEETING
EXAM #1
Macintosh & Linux Boot Process & File Systems
|
|
|
|
Mar 3
|
NO CLASS - SIGCSE
and SPRING BREAK!
|
|
|
|
Mar 10
|
Forensics Tools |
Chapter 7 |
|
|
Mar 17
|
Forensic Analysis and Validation
|
Chapter 9 |
|
Mar 24 |
Graphics Files |
Chapter 10 |
|
|
Mar 31
|
Network Forensics |
Chapter 11 |
|
Apr 7 |
Email |
|
|
|
Apr 14
|
Cell Phones and Mobile Devices |
Chapter 13 |
|
Apr 21 |
Report Writing |
Chapter 14 |
|
|
Apr 28
|
Expert Testimony
|
|
|
|
Final Exam - Part I: Comprehensive (Online)
|
|
May 5
|
Final Exam - Part II: Practical
|
|
|
|
|
|
| Copyright © 2008, JAman |
|
4/22/09 |
|
|
