Introduction to Digital Forensics | Faculty of Technical Sciences

Subject: Introduction to Digital Forensics (19.SEM022)

Type of studies	Title
Master Academic Studies	Information Security (Year: 1, Semester: Summer)
Master Academic Studies	Software Engineering and Information Technologies (Year: 1, Semester: Summer)
Master Academic Studies	Computing and Control Engineering (Year: 1, Semester: Summer)
Master Academic Studies	Information and Analytics Engineering (Year: 1, Semester: Summer)

General information:

Category	Theoretical-methodological
Scientific or art field	Applied Computer Science and Informatics
ECTS	6

(1) familiarizing with basic cyber crime, digital forensics and e-discovery concepts (2) gaining knowledge and skills necessary to identify, collect, store, analyse and present digital evidence using standardized methods and tools and (3) familiarizing with ethical aspects of and legislation and regulation relevant to digital forensics and e-discovery.

After successfully completing the course a student (1) can understand basic cyber crime, digital forensics and e-discovery concepts, (2) is able to participate in discovering, prosecuting and putting on trial cyber crime perpetrators as an IT practitioner, (3) is able to use standard methods and tools to for data, network, software, mobile and multimedia forensics and e-discovery and (6) understands ethical aspects of digital forensics and e-discovery.

(1) overview of cyber crime, digital forensics & e-discovery, (2) legal aspects of digital forensics and e-discovery, (3) data forensics (hardware interfaces, disk images, memory dumps, cryptanalysis), (4) network forensics (TCP/IP, HTTP, SMTP/POP3/IMAP, VoIP, wireless networks), (5) software forensics (system software, application software, DBMS), (6) mobile forensics (hardware, operating systems, apps, SIM cards, mobile communications), (7) multimedia forensics (photos, audio, video), (8) e-discovery, (9) ethical aspects of digital forensics and e-discovery and (10) exemplary cases.

Teaching methods include: lectures, computer practice classes and consultations. During the lectures the content of the course is presented using the necessary didactic tools while active participation of students is encouraged. The practical aspect of the course is covered at computer practice classes through assignments which students do independently or with the help of teaching assistants. The course lecturer and teaching assistants have consultations with the students. During the consultations the students are given additional explanations of the material covered at the lecture and practice classes.

Authors	Title	Year	Publisher	Language
Gerard Johansen	Digital Forensics and Incident Response	2017	Packt Publishing	English
Shiva V.N. Parasram	Digital Forensics with Kali Linux	2017	Packt Publishing	English
André Årnes	Digital Forensics	2018	John Wiley & Sons Ltd	English
Sammons, J.(ed.)	Digital Forensics	2016	Elsevier	English
Quick, D., Martini, B., Choo, K.K.R.	Cloud Storage Forensics	2014	Elsevier	English