FIT5172 - Computer forensics

Offered

Not offered in 2009

Synopsis

This unit provides students with a thorough grounding in the theory and application of computer forensic techniques. Topics covered will include: the role of computer forensics in computer crime detection and prosecution, legislative frameworks, phases of a computer forensic investigation, techniques involved in data recovery from volatile and non-volatile storage media, intrusion detection, computer forensic tools.

Objectives

Students who successfully complete the unit will:

1. be conversant with the types of applications that benefit from computer forensic analysis
2. appreciate the interrelationship between computer forensic techniques and the general principles behind rules of evidence.
3. understand the tasks involved in the acquisition, analysis and presentation phases of computer forensic investigations.
4. understand the methods involved in the recovery of data from various volatile and non-volatile storage media.
5. develop and utilise audit trails and intrusion detection techniques
6. deploy open-source tools and analyse the results of such deployment in particular application contexts
7. appreciate the various technical aspects of computer forensic investigations

Assessment

Assignment work: 70%, Unit test: 30%

Contact hours

2 hours lectures/week, 2 hours tutorials/week

Prerequisites

For MAIT students, FIT9017, FIT9018, FIT9019, FIT9030, FIT9020 and FIT4037.
Recommended knowledge: computer architectures, principles of data communication and networks, experience with operating and file systems

Additional information on this unit is available from the faculty at:

http://www.infotech.monash.edu.au/units/fit5172