CSCI 388 Computer Forensics - Fall 2014

Course Information

Lectures:

MWF 11:00 - 11:50 AM

Professor:


Dr. Yana Kortsarts
Office: Freedom Hall 313
Phone: (610) - 499 - 4367
e-mail: ykortsarts@mail.widener.edu
homepage: http://cs.widener.edu/~yanako

Office Hours:

• Monday: 12:00 - 1:00 PM
• Tuesday: By appointment
• Wednesday: 12:00 - 1:00 PM, 3:50 - 4:20 PM
• Thursday: 12:00 - 1:00
• Friday: 9:20 - 9:50 AM, 1:00 - 3:00 PM
• Monday and Wednesday: 9:20 - 9:50 - By appointment


To make an appointment, please, send an e-mail ykortsarts@mail.widener.edu

Recommended Text - NOT REQUIRED:

• Access Data Forensics (will be provided)
• File System Forensics Analysis, Brian Carrier, Pearson Education, Inc, ISBN 0-32-126817-2

Course Description

Computer forensics is the scientific examination and analysis of data held on, or retrieved from, computer storage media in such a way that the information can be used as evidence in a court of law. This course will introduce students to the fundamentals of computer forensics and cyber-crime scene analysis, evidence acquisition and data decryption. Student will learn investigative and analytical techniques to acquire and protect potential legal evidence. The various laws and regulations dealing with computer forensic analysis will be discussed. Students will be introduced to the emerging international standards for computer forensic analysis, as well as a formal methodology for conducting computer forensic investigations.

Tentative Course Topics:

• Digital Investigation Foundations
  • Digital Crime Scene Investigation Process
  • Data Analysis
  • Overview of the toolkits
• File Systems Analysis
  • File System Category
  • Specific File Systems Overview
• Working with FTK Imager
• Registry Viewer Introduction
• Working with FTK
• Processing the Case
• Regular Expressions
• Overview of Cryptography Topic Related to the Course
  • Understanding of the challenges faced when encountering encrypted data during forensic examinations.
  • Typical Encryption Schemes Used in Today's Software applications
  • Encryption File System
  • Working with PRTK Password Recovery Toolkit
• Case Reporting

Course Goals and Objectives

The objective of this course is to introduce students to the fundamentals of computer forensics and cyber-crime scene analysis, evidence acquisition and data decryption. Student will learn investigative and analytical techniques to acquire and protect potential legal evidence. In this course students will learn to use Access Data Forensic Toolkit (FTK), FTK Imager, Password Recovery Toolkit (PRTK) and Registry Viewer, which is the leading computer forensics technology used by examiners throughout the world today. Students will work on Forensic Recovery of Evidence Devices (FRED) by Digital Intelligence systems to conduct forensic computer examinations.

Policies

Attendance Policy

The University's policy will be applied. Students who miss class are always responsible for obtaining class assignments. All assignments and class materials are available through this website.

In this course ATTENDANCE IS REQUIRED. Class Participation and Attendance is 25% of the final grade.

Academic Fraud

The Science Division strictly enforces the University's policy on cheating and other forms of academic fraud.

Student Academic Grievance Procedure

If a student has a grievance concerning a class in which he/she is enrolled, he/she will first try to resolve the problem with the instructor of the class. If it is impossible to resolve the matter at this level, then the grievance must be placed in writing and appealed in the following order:
• Division or Program Head
• Dean of Arts and Sciences (Arts and Sciences Academic Council)
• Provost of the University
• University Academic Council
All student grievances will first be referred to the class instructor before they are treated at the level of the Division Head.
For Standards for Academic Integrity, Appeal Procedures for Student Academic Grievances, and Attendance Policy please see Student Handbook and Widener's Undergraduate Catalog:

Student Handbook
Widener's Undergraduate Catalog

Electronic Devices in the Classroom

• NO CELL PHONES. Cell phones must be turned off for the duration of the lecture and lab.
• All electronic devices except cell phones are permitted

Evaluation Criteria (Grading)

Your grade for this course is divided into three categories: In Class Quizzes and Lab Assignments, In Class Practice and Participation, Homework. The breakdown is as follows:

Final Grade

In Class Quizzes and Lab Assignments	70%
In Class Practice, Participation and Attendance	25%
Homework	5%
Total	100%

Final Grade Table

A:	95 - 100
A-:	90 - 94
B+:	87 - 89
B:	83 - 86
B-:	80 - 82
C+:	77 - 79
C:	73 - 76
C-:	70 - 72
D+:	67 - 69
D:	60 - 66
F:	59 - 0

Course and Reading Material

All information in this document is subject to change throughout the semester. Check the course website and your Campus Cruiser e-mail regularly, any changes will be indicated on the course website and sent by e-mail. Students will be notified about any change at least one week in advance.