Forensics Computer Syllabus Instructor: Phone: Office: Email: Office Hours: CIT 430 Spring 2009
Yi Hu [phone] ST 370 [e-mail] MW:10am-11am, M:1:00pm-2:00pm, W: 3:15pm-4:15pm
Class Meeting Time: MW 2:00pm 3:15pm Class Meeting Place: ST 361 Textbook: Real Digital Forensics: Computer Security and Incident Response (Paperback) ISBN-13: 978-0321240699 C or better in CIT 380 Fundamentals of computer and network forensics; forensic duplication and analysis; reconstruction of computer activities; forensic tools. This course will introduce computer forensics to undergraduate students. It will cover the following topics: Windows Live Response Linux Live Response Network-based Forensics Acquiring a Forensic Data Duplication Forensic Analysis Techniques Forensic Tool Analysis
Prerequisites: Course Content:
Course Topics:
Student Outcomes: By the end of the course, students will Understand the correct procedure for computer forensics Understand what volatile or nonvolatile data are important and related to the computer forensic procedure Understand how forensic tools work Be able to use forensic tools to conduct computer forensic activities Student Assessment Information: Students will be assessed through assignments and tests that are designed to demonstrate the students understanding of the materials of this class. Grading: Lab and Home Assignments: 40% Midterm (2:00pm 3:15pm, Wednesday, Mar. 4, 2009): 30%
Final (1:00pm-3:00pm, Monday, May 4, 2009): 30% Grading Scale: A: 90-100 B: 80-89 C: 70-79 D: 60-69 F: 0-59 Grading Procedure for Assignments: Students should turn in their assignments by the due date for each assignment. For an assignment turned in after the due date, 10% of your score will be deducted for every calendar day that the assignment is late. Also, once the solution to an assignment has been discussed in the class or posted on NKUs Blackboard System, no late assignment will be accepted. Absentee Policy: Students should make their best efforts to attend each class. If you missed any class, you are responsible any for content covered in that class. Only for a reasonable reason a student can be allowed to have a make-up test for one of the missed tests. The student needs to notify the instructor immediately after the missed test with a verifiable reason. After getting the permission for the make-up test from the instructor by email, the student will be given a make-up test. A student can only have one make-up test for this class.
Make-up Test:
Disability Disclosure:Students with disabilities who require accommodations (academic adjustments, auxiliary aids or services) for this course must register with the Disability Services Office. Please contact the Disability Service Office immediately in the University Center, Suite 320 or call [phone] for more information. Verification of your disability is required in the Disability Services Office for you to receive reasonable academic accommodations. Schedule of Classes: Please see the next page.
Schedule of Classes (Subject to Change)
Week 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 Date M, 1/12/09 W, 1/14/09 M, 1/19/09 W, 1/21/09 M, 1/26/09 W 1/28/09 M, 2/2/09 W 2/4/09 M, 2/9/09 W 2/11/09 M, 2/16/09 W 2/18/09 M, 2/23/09 W 2/25/09 M, 3/2/09 (review) W 3/4/09 (midterm) M, 3/09/...