Monash University Handbook 2011 Postgraduate - Unit

Refer to the specific census and withdrawal dates for the semester(s) in which this unit is offered.

Synopsis

This unit provides students with a thorough grounding in the theory and application of computer forensic techniques. Topics covered will include: the role of computer forensics in computer crime detection and prosecution, legislative frameworks, phases of a computer forensic investigation, techniques involved in data recovery from volatile and non-volatile storage media, intrusion detection, computer forensic tools.

Objectives

At the completion of this unit students will:

• be conversant with the types of applications that benefit from computer forensic analysis;
• appreciate the interrelationship between computer forensic techniques and the general principles behind rules of evidence;
• understand the tasks involved in the acquisition, analysis and presentation phases of computer forensic investigations;
• understand the methods involved in the recovery of data from various volatile and non-volatile storage media;
• be able to develop and utilise audit trails and intrusion detection techniques;
• be able to deploy open-source tools and analyse the results of such deployment in particular application contexts;
• appreciate the various technical aspects of computer forensic investigations.

Assessment

Assignments: 70%; Unit test: 30%

Contact hours

2 hrs lectures/wk, 2 hrs tutorials/wk

Prerequisites

Recommended knowledge: computer architectures, principles of data communication and networks, experience with operating and file systems.

Additional information on this unit is available from the faculty at:

http://www.infotech.monash.edu.au/units/fit5172