units

FIT3168

Faculty of Information Technology

18 September 2017 22 December 2024

print version

This unit entry is for students who completed this unit in 2016 only. For students planning to study the unit, please refer to the unit indexes in the the current edition of the Handbook. If you have any queries contact the managing faculty for your course or area of study.

Monash University

6 points, SCA Band 2, 0.125 EFTSL

Undergraduate - Unit

Refer to the specific census and withdrawal dates for the semester(s) in which this unit is offered.

Faculty

Information Technology

Offered

Not offered in 2016

Synopsis

This unit provides a broad coverage of digital ICT forensics. Students will examine definitions of evidence as they apply to investigations involving the seizure and examination of information technology devices. The unit will introduce students to various tools, techniques and algorithms that may be employed by investigators for acquisition, preservation and analysis of evidence. Disk-based (local) and network (remote) forensic environments will be explored. Students will also learn of the impediments and complicating factors that can threaten forensic investigations.

Outcomes

At the completion of this unit, students should be able to:

  1. explain the motivations and landscape of forensic investigations in an IT context;
  2. explain the relevant legal definitions and frameworks that apply to digital forensic investigations;
  3. select appropriate tools and algorithms to perform forensic investigations and acquire relevant evidence;
  4. apply and evaluate forensic techniques in local media-based an network-based environments;
  5. report on forensic findings in a clear and concise manner.

Assessment

Examination (2 hours): 40%; In-semester assessment: 60%

Workload requirements

Minimum total expected workload equals 12 hours per week comprising:

(a.) Contact hours for on-campus students:

  • Two hours lectures
  • Two hours laboratories

(b.) Additional requirements (all students):

  • A minimum of 2-3 hours of personal study per one hour of lecture time in order to satisfy the reading, tute, prac and assignment expectations.

See also Unit timetable information

This unit applies to the following area(s) of study

Cybersecurity
Computer networks and security

Prerequisites

FIT2093