Information on this page, including unit offerings, is from the 2020 academic year.
Cyber Forensics and Information Technology (ICT378)
|Organisational Unit||Information Technology, Mathematics and Statistics|
|Availability||MURDOCH: S1-internal, S1-external
|Teaching Timetables||Murdoch S1
|Description||This unit combines three separate disciplines: technology, law and forensic analysis that combined form the paradigm of cyber forensics. The unit offers an insight into the cyber forensic environment and looks at the preservation, location, selection, validation, and presentation stages of cyber forensic examination. Students undertake theoretical study as well as analysis of a crime scene simulation to combine theoretical and experiential knowledge.|
|Unit Learning Outcomes||On successful completion of the unit you should be able to:
1. Understand the fundamentals of cyber forensics
2. Use a wide range of open source and proprietary tools and technologies to conduct investigation
3. Have an awareness of the significance of different technology platforms, filesystems and implementation environments
4. Understand the legal and ethical implications of forensic examination procedures
5. Conduct case research and practical investigation of a digital crime scene
|Timetabled Learning Activities||Lectures: 1 x 2 hours per week; tutorials: 1 x 2 hours per week.
All offerings of this unit include the equivalent of 30 hours of structured learning.
|Unit Learning Experiences||Students in this unit will describe the threats to data held on computers. Forensic examination processes will be used to recover and preserve, analyse and present evidence obtained from a computer for evidentiary purposes. Basic cyber-forensic investigation skills will be learnt by using forensic tools to identify and recover evidence from a computer. Students will also evaluate evidence obtained from a compromised computer and be able to prepare a forensic examination report based on their findings.|
|Assessment||This unit will feature 50% ongoing assessment and a 50% final examination to be held in the regular exam period. The ongoing assessment component will be comprised of quizzes and take-home assignments.|
|Prerequisites||ICT171 Introduction to Server Environments and Architecture or enrolment in a postgraduate IT course.|
|Previously||2014: 'Computer Forensics'|
|Appears in these Courses/Majors:
see individual structures for context
|Appears in these Minors||Computer Forensics and Computer Security
Computer Forensics and Information Security Policy
|Internet Access Requirements||Murdoch units normally include an online component comprising materials, discussions, lecture recordings and assessment activities. All students, regardless of their location or mode of study, need to have access to and be able to use computing devices with browsing capability and a connection to the Internet via Broadband (Cable, ADSL or Mobile) or Wireless. The Internet connection should be readily available and allow large amounts of data to be streamed or downloaded (approximately 100MB per lecture recording). Students also need to be able to enter into online discussions and submit assignments online.|