The unit was introduced during the development of the Bachelor of Information Technology in order to address the in-demand and rapidly evolving domain of IT (digital) forensics.

Introduced for course architecture programs. Effective semester 1, 2016

24/9/19: Admin - updating the exam duration to include additional 10 minutes as per University requirement.

07/10/2020 Admin: Update to include new assessment and teaching approach fields as per Handbook requirements.

14/07/2021 Matt - Add unit learning outcome 6 to reflect the expected outcomes. Change the in-semester assignments from 60% to 50% and remove the weekly quizzes. Assignment 1 would be divided into two different assignments with 10% for the first one. It is intended to provide some level of time pressure and get students to work on the assignments earlier and assist them with completing the following assignments.

The unit is a part of the extended major in Computer Networks and Security.

At the completion of this unit, students should be able to:

1. explain the motivations and landscape of forensic investigations in an IT context;
2. explain the relevant legal definitions and frameworks that apply to digital forensic investigations;
3. select appropriate tools and algorithms to perform forensic investigations and acquire relevant evidence;
4. apply and evaluate forensic techniques in local media-based an network-based environments;
5. report on forensic findings in a clear and concise manner.
6. demonstrate how digital forensics can be employed by Police and Tax officials in a court of law.

029901

This unit provides a broad coverage of digital ICT forensics. Students will examine definitions of evidence as they apply to investigations involving the seizure and examination of information technology devices. The unit will introduce students to various tools, techniques and algorithms that may be employed by investigators for acquisition, preservation and analysis of evidence. Disk-based (local) and network (remote) forensic environments will be explored. Students will also learn of the impediments and complicating factors that can threaten forensic investigations.

• Eoghan Casey. (2010) Handbook of Digital Forensics and Investigation. Elsevier Academic Press.
• Chuck Easttom. (2010) Computer crime, investigation, and the law. (1st edition) Course Technology PTR.
• Joakim Kavrestad (2017) Guide to Digital Forensics: a Concise and Practical Introduction. Springer.
• John Sammons. (2012) The basics of digital forensics. (1s t edition) Elsevier Academic Press.

On-campus

Lecture and tutorials or problem classes

Examination (2 hours and 10 minutes): 50%; In-semester assessment: 50%

1. Assignment 1: 10% - ULO 1,2
2. Assignment 2: 20% - ULO 3,4
3. Assignment 3: 20% - ULO 2,3,5
4. Scheduled Final Assessment: 50% - ULO 1,2,3,4,5,6

Minimum total expected workload equals 12 hours per week comprising:

(a.) Contact hours for on-campus students:

(b.) Additional requirements (all students):

This unit may require network-isolated laboratories.

FIT2093