Digital Forensics
2011-2012 - IMT3551 - 5sp

Anbefalt forkunnskap

•  IMT2282- Operativsystemer
•  IMT2431- Datakommunikasjon og nettverkssikkerhet

Forventet læringsutbytte

Students are able to explain the fundamental principles of digital forensics. The students are able to survey a digital crime scene and to acquire, analyze and present digital evidence in a forensically sound manner.

Emnets temaer

•  Digital investigations and evidence
•  Chain of custody and forensic soundness
•  Timeline analysis
•  Live system forensics
•  File system forensics
•  Forensic reconstructions
•  Advanced topics if time permits
  • Internet and network forensics
  • Cybercrime law

Pedagogiske metoder

Forelesninger
Lab.øvelser

Vurderingsformer

Annet

Vurderingsformer

An overall evaluation based on a 100 point scale, where project work counts 40 points, oral presentation counts 20%, and final exam (3 hours) counts 40 points. Conversion from 100 point scale to A-F scale according to recommended conversion table. In specific circumstances, emneansvarlig can slightly adjust the limits in the conversion table to enforce compatibility with the qualitative descriptions on the A-F scale.

Karakterskala

Bokstavkarakterer, A (best) - F (ikke bestått)

Sensorordning

Intern og ekstern sensor sensurerer alle besvarelsene

Utsatt eksamen (tidl. kontinuasjon)

Ordinær kontinuasjon på skriftlig eksamen

Tillatte hjelpemidler (gjelder kun skriftlig eksamen)

Ingen

Obligatoriske arbeidskrav

Oppgis ved semesterstart

Læremidler

•  Dan Farmer and Wietse Venema: Forensic Discovery, Addison-Wesley, 2005
•  Presentation material and 5 selected papers

Erstatter

IMT3711 Digital Forensic Science

Supplerende opplysninger

Kjennskap til Linux er en fordel

In case there will be less than 5 students that will apply for the course, it will be at the discretion of Studieprogramansvarlig whether the course will be offered or not an if yes, in which form.