Module Details |
The information contained in this module specification was correct at the time of publication but may be subject to change, either during the session because of unforeseen circumstances, or following review of the module at the end of the session. Queries about the module should be directed to the member of staff with responsibility for the module. |
Title | COMPUTER FORENSICS | ||
Code | CKIT519 | ||
Coordinator |
Prof FP Coenen Computer Science Coenen@liverpool.ac.uk |
||
Year | CATS Level | Semester | CATS Value |
Session 2016-17 | Level 7 FHEQ | Whole Session | 15 |
Aims |
|
To provide students with opportunities to learn how to identify, extract, document, interpret, preserve, assess, compare, and judge computer media for evidentiary purposes and/or root cause analysis. |
Learning Outcomes |
|
A deep and critical understanding of the theory and practice of computer forensics. |
|
A complete understanding of the processes for digital evidence acquisition, authentication, analysis, and auditing.
|
|
An understanding of the use of computer forensic tools to carry out digital forensic investigation.
|
|
Be able to conduct digital forensic investigations with respect to a variety of computer platforms. |
|
An understanding of the legal framework within which the discipline of computer forensics operates (with respect to a number of different countries).
|
|
In the context of computer forensics, be able to differentiate between ethical issues, legal issues, and criminal motives.
|
|
An awareness of future trends in computer forensics.
|
Syllabus |
|
1 |
Week 1: Digital Evidence, Computer Crime, Technology, and Law Acquisition, authentication and analysis of digital evidence. Comparison of technology and legal framework for different countries.
Week 2: The Investigative Process, Reconstruction, and Modus Operandi
The digital evidence investigative process; investigative reconstruction; and modus operandi, motive, and technology.
Week 3: Applying Forensic Science to Computers
The role of digital evidence in court trials and the application of forensic science to computers.
Week 4: Investigating Windows Computers and Network Forensics
Forensic investigation technologies for computers running the Microsoft Windows™ Operating Systems.
Week 5: Investigation Unix Systems, Macintosh Systems, and Handheld Devices
Forensic investigation technologies for UNIX systems, Macintosh systems, and handheld devices.
Week 6: Network Forensics I
Network basics for digital investigations and network forensic techniques on physical and data-link layers.
Week 7: Network Forensics II
Comparison of network forensics at the network, transport, session, presentation and application layers.
Week 8: Computer Crime Investigation and Career Development
Guidelines for computer crime investigation, career development as a computer forensic investigator, and future trends of computer forensics.
|
Teaching and Learning Strategies |
|
Virtual classroom hours (for online modules) - Number of hours per week, per student expected in the virtual classroom in discussion, dedicated to group work and individual assessment is 8.75. |
|
Non-classroom hours (for online modules) - Number of hours per week, per student expected for reading, research and other individual work to support engagement in the classroom is 10. |
Teaching Schedule |
Lectures | Seminars | Tutorials | Lab Practicals | Fieldwork Placement | Other | TOTAL | |
Study Hours |
70 80 |
150 | |||||
Timetable (if known) |
Number of hours per week, per student expected in the virtual classroom in discussion, dedicated to group work and individual assessment is 8.75.
Number of hours per week, per student expected for reading, research and other individual work to support engagement in the classroom is 10. |
||||||
Private Study | 0 | ||||||
TOTAL HOURS | 150 |
Assessment |
||||||
EXAM | Duration | Timing (Semester) |
% of final mark |
Resit/resubmission opportunity |
Penalty for late submission |
Notes |
CONTINUOUS | Duration | Timing (Semester) |
% of final mark |
Resit/resubmission opportunity |
Penalty for late submission |
Notes |
Coursework | Weekly Discussion Qu | Whole Session | 30 | Yes | Standard UoL penalty applies | Assessment 1 |
Coursework | Weekly Discussion Qu | Whole Session | 35 | Yes | Standard UoL penalty applies | Assessment 2 |
Coursework | 6 weeks Group Work P | Whole Session | 35 | Yes | Standard UoL penalty applies | Assessment 3 Notes (applying to all assessments) 1) Due to nature of the on-line mode of instruction this work is not marked anonymously. 2) Students who fail the module have the opportunity to repeat the entire module, thus all failed assessments. 3) The "Standard UoL Penalty" for late submission that applies is the "Standard UoL Penalty" agreed with respect to online programmes offered in collaboration with Laureate Online Education. |
Recommended Texts |
|
Reading lists are managed at readinglists.liverpool.ac.uk. Click here to access the reading lists for this module. Explanation of Reading List: |