Course Syllabus - IST 454 Computer and Cyber Forensics General Course Information

Transcription

1 General Course Information Department IST Number 454 Title Credits 3 Description Computer and Computer and communication technologies have become the key components to support critical infrastructure services in various sectors of our society. In an effort to share information and streamline operations, organizations are creating complex networked systems and opening their networks to customers, suppliers, and other business partners. Increasing network complexity, greater access, and a growing emphasis on the Internet have made information and network security a major concern for organizations. IST 454 focuses on computer and cyber forensics. Students will learn different aspects of computer and cyber crime and ways in which to uncover, protect, exploit, and document digital evidence. Students will be exposed to different types of tools (both software and hardware), techniques and procedure, and be able to use them to perform rudimentary forensic investigations. A major component of the course will be several hands-on exercises and a final team-based project. This course will incorporate collaborative and action-learning experiences wherever appropriate. Emphasis will be placed on developing and practicing writing and speaking skills through application of the concepts, theories and technologies that define the course. Last Updated: 12:21:50 AM Friday, September 07, 2007 Page 1 of 10

2 Integrated throughout are perspectives of computer and related legal process, including computer crimes from state and federal law, methods of interaction with law enforcement and prosecutors, admissibility of expert witness testimony and the use of forensic reports in civil, regulatory and internal investigations. Prerequisite IST220 Objectives Instructor Information Primary Instructor William H. Bowers Office Franco 119 Phone Number (610) Fax (610) (Please use a PSU address and include the course in the subject) Text Message Home Page AIM: MSN Messenger: [email protected] psuwhb108 [email protected] Meeting Time and Place Section Number 001 Campus Berks Location Luerssen 142 Days and Times Monday: 3:30 PM - 4:20 PM Wednesday: 3:30 PM - 4:20 PM Last Updated: 12:21:50 AM Friday, September 07, 2007 Page 2 of 10

3 Office Hours: Course Materials Required Title Edition Friday: 3:30 PM - 4:20 PM ISBN Author Publisher Website Guide to Computer Forensics and Investigations 2d Amelia Phillips, Bill, Frank Enfinger, Christopher Steuart Thomson Course Technology: Boston, MA &CFID= &CFTOKEN= Title Edition EnCase Computer Forensics: The Official EnCE: EnCase Certified Examiner Study Guide ISBN Author Publisher Website Steve Bunting, William Wei Sybex: San Francisco, CA html Class Schedule Week 1 Monday, August 27, 2007 Last Updated: 12:21:50 AM Friday, September 07, 2007 Page 3 of 10

4 Course Introduction Forensics as a Profession Chapter 1 Chapter 1 Lab1 1 Week 2 Monday, September 03, 2007 Understanding Computer Investigations Chapter 2 Chapter 2 Lab2 2 Group Week 3 Monday, September 10, 2007 The Investigator's Office and Laboratory Chapter 3 Chapter 3 Team Membership & Charter 3 Week 4 Monday, September 17, 2007 Current Computer Forensics Tools Chapter 4 Chapter 4 4 Last Updated: 12:21:51 AM Friday, September 07, 2007 Page 4 of 10

5 Week 5 Monday, September 24, 2007 Processing Crime and Incident Scenes Chapter 5 Chapter 5 5 Week 6 Monday, October 01, 2007 Digital Evidence Controls Chapter 6 Chapter 6 6 Week 7 Monday, October 08, 2007 Working with Windows and DOS Systems Chapter 7 Chapter 7 7 Week 8 Monday, October 15, 2007 Macintosh and Linux Boot Processes and File Systems Chapter 8 Chapter 8 8 Last Updated: 12:21:51 AM Friday, September 07, 2007 Page 5 of 10

6 Week 9 Monday, October 22, 2007 Data Acquisition Chapter 9 Chapter 9 9 Week 10 Monday, October 29, 2007 Computer Forensics Analysis Chapter 10 Chapter Week 11 Monday, November 05, 2007 Recovering Image Files Chapter 11 Chapter Week 12 Monday, November 12, 2007 Network Forensics Chapter 12 Chapter Week 13 Monday, November 19, Investigations Chapter 13 Chapter Last Updated: 12:21:51 AM Friday, September 07, 2007 Page 6 of 10

7 Week 14 Monday, November 26, 2007 Becoming an Expert Witness and Reporting Results of Investigations Chapter 14 Chapter Attendance You are expected to attend all class sessions. This course will cover a great deal of material and missing even one class will put you at a disadvantage. I recognize that there may be job, family or other unavoidable conflicts with scheduled classes. These will be dealt with on a case-by-case basis before the scheduled class. If you have a conflict that cannot be avoided, please let me know as soon as you are aware of it so that we may find a reasonable solution. Except in cases of true last minute unavoidable conflicts, I will not excuse an absence after the fact. Please make sure to let me know before the class, not afterwards. If excessive absences become a problem on those days where there is no direct penalty for missing class, such as group work or lab days, I reserve the right to award bonus points for attendance or participation or through the use of unannounced pop quizzes for those who are in class. Evaluation Methods You will be evaluated on your individual chapter reading notes and the group project deliverables. The standards for the reading notes will be linked to the online syllabus and discussed the first class meeting. The specifications for the group deliverables will be linked to the online syllabus, distributed and discussed in class. The deliverables will be evaluated for conformance with the specifications. Writing assignments will be evaluated as stated in the syllabus section titled "Assignment Standards". Your grade will be a simple percentage of the group and individual points earned divided by the total possible points. Last Updated: 12:21:51 AM Friday, September 07, 2007 Page 7 of 10

8 Grading Grading is in accordance with the University standards: ( Letter Grade Points Minimum Percentage A A B B B C C D F While I am always willing to discuss grades, grade changes will not be considered more than one week after an assignment has been returned. Deferred grades for the semester will only be considered if made in a timely manner and if the basis for the request is beyond the control of the student. Academic Integrity University Policies and Rules 49-20: Academic integrity is the pursuit of scholarly activity in an open, honest and responsible manner. Academic integrity is a basic guiding principle for all academic activity at Penn State, and all members of the University community are expected to act in accordance with this principle. Consistent with this expectation, the University's Code of Conduct states that all students should act with personal integrity, respect other students' dignity, rights and property, and help create and maintain an environment in which all can succeed through the fruits of their efforts. Academic integrity includes a commitment not to engage in or tolerate acts of falsification, misrepresentation or deception. Such acts of dishonesty violate the fundamental ethical principles of Last Updated: 12:21:51 AM Friday, September 07, 2007 Page 8 of 10

9 the University community and compromise the worth of work completed by others. Academic dishonesty includes, but is not limited to, cheating, plagiarizing, fabricating of information or citations, facilitating acts of academic dishonesty by others, having unauthorized possession of examinations, submitting work of another person or work previously used without informing the instructor, or tampering with the academic work of other students. In short, if you use someone else's work, either directly or indirectly, be sure to cite the work and give appropriate credit. If you are unsure, check with me beforehand and credit the source. Source code or written assignments that are so similar to another's work as to raise questions will not be evaluated, both submissions will receive grades of zero for that assignment and an Academic Integrity form will be completed and sent to the Associate Dean for referral to the appropriate administrative committees. In accordance with University policy, I can... not issue a grade solely based upon a belief that a student has violated academic integrity. An instructor must instead follow the procedures provided for in AAPPM G9. ( This means that if I assess a grade penalty for a violation, I must file the official paperwork with the University. Blatant or repeated acts of academic dishonesty will be referred to the appropriate administrative committees and you may receive a failing grade for the course due to academic dishonesty. Accommodations for Persons with Disabilities "It is the policy of the University not to discriminate against persons with disabilities in its admission policies or its procedures or educational programs, services or activities." (Student Guide to General University Policies and Rules , Penn State welcomes students with disabilities into the University's educational programs. It is my policy to provide any reasonable accommodations necessary for a person with a disability to be provided a level playing field and equal opportunities in my classroom. Please let me know as early in the semester as possible of any requirements you may have so I may provide those accommodations. Susan Anderson, Disability Services, [email protected], , 153 Franco Building (Berks campus) is also available to assist you or answer questions about disability related issues. Last Updated: 12:21:51 AM Friday, September 07, 2007 Page 9 of 10

10 Modification of Course Policies This syllabus will be modified and kept up to date. It is your responsibility to check the online version frequently to insure that you have the latest information. All of my syllabi are linked to my home page ( The above schedule, policies and assignments in this course may be modified to meet the specific requirements of individual course sections or by mutual agreement between the students and myself. Last Updated: 12:21:51 AM Friday, September 07, 2007 Page 10 of 10