Digital Forensic Science
2007-2008 - IMT3711 - 5sp

Anbefalt forkunnskap

• IMT2282- Operativsystemer
• IMT2431- Datakommunikasjon og nettverkssikkerhet

Forventet læringsutbytte

Students are introduced to the fundamental principles of digitalforensics. The students will be expected to be able to survey a digitalcrime scene and to acquire, analyze, and present digital evidence in aforensically sound manner.

Emnets temaer

• Digital investigations and evidence
• Chain of evidence and forensic soundness
• Timeline analysis
• Live system forensics
• File system forensics
• Forensic reconstructions
• Advanced topics if time permits

Pedagogiske metoder

Forelesninger
Lab.øvelser

Vurderingsformer

Annet

Vurderingsformer

An overall evaluation based on a 100 point scale, where project workcounts 50 points and final exam counts 50 points (at least 18 MUST beobtained). Conversion from 100 point scale to A-F scale according torecommended conversion table. In specific circumstances, emneansvarligcan slightly adjust the limits in the conversion table to enforcecompatibility with the qualitative descriptions on the A-F scale.

Karakterskala

Bokstavkarakterer, A (best) - F (ikke bestått)

Sensorordning

Rettes av emnelærer(e)

Utsatt eksamen (tidl. kontinuasjon)

Hele emnet må taes på nytt.

Tillatte hjelpemidler (gjelder kun skriftlig eksamen)

Ingen

Obligatoriske arbeidskrav

Oppgis ved semesterstart

Læremidler

• Dan Farmer and Wietse Venema: Forensic Discovery, Addison-Wesley, 2005
• Presentation material and selected academic papers