Skip to main content

HI2009 IT-Security III: Computer Forensics Lab 7.5 credits

Course offerings are missing for current or upcoming semesters.
Headings with content from the Course syllabus HI2009 (Autumn 2011–) are denoted with an asterisk ( )

Content and learning outcomes

Course contents

How to use typical Computer Forensics tools and techniques. Hard disk analysis, Mobile phone analysis, Sniffers, Network Monitoring. Wireless Surveillance.

Intended learning outcomes

The course goal is to enable the student to work with typical Computer Forensics tools, as a continuation to th Computer Forensics theory studied in the IT-Sec II Computer Forensics course.

Literature and preparations

Specific prerequisites

Knowledge corresponding to HI119V IT-Sec II and documented proficiency in English corresponding to English A/English 5.

Recommended prerequisites

Knowledge corresponding to HI119V IT-Sec II.

Equipment

You will need:                      

   * A personal computer (PC) running  Windows XP / Vista / 7/8

   * Internet access                                      

   * two working email addresses (do not use free webmail clients, use POP3)

   * A scientific pocket calculator

Literature

Kursmaterial kan rekvireras från Högskolans Bokservice på  Campus Haninge, telefon: 08-790 4885; e-post: bokservice@sth.kth.se.

Kurslitteratur: Real Digital Forensics, Jones, Bejtlich & Rose, Addison-Wesley, ISBN-10: 0321240693, ISBN-13:9780321240699.

Forensic Tools & Technology, Eoghan Casey, 2001, 448 pp, Academic Press,ISBN-10: 0121631036, ISBN-13: 9780121631031

Kurskompendium HI2009 på CD-ROM med laborationsmaterial, studieanvisningar och övningsuppgifter, programvara och referensmaterial. Förf. L.O. Strömberg.

Vi utgår från att studenterna redan har kursmaterialet från HI119V, och vi kommer i kursen att använda mjukvara och annat material som återfinnes i HI119V:s digitala kurskompendium och lab-kit (HI119V är

förkunskapskrav till denna kurs).

Examination and completion

If the course is discontinued, students may request to be examined during the following two academic years.

Grading scale

A, B, C, D, E, FX, F

Examination

  • LAB1 - Laboratory Work, 1.5 credits, grading scale: P, F
  • LAB2 - Laboratory Work, 1.5 credits, grading scale: P, F
  • LAB3 - Laboratory Work, 1.5 credits, grading scale: P, F
  • TEN1 - Examination, 3.0 credits, grading scale: A, B, C, D, E, FX, F

Based on recommendation from KTH’s coordinator for disabilities, the examiner will decide how to adapt an examination for students with documented disability.

The examiner may apply another examination format when re-examining individual students.

Examinations are offered three times a year: typically the first Saturday in May, August, and December.

Written examinations are four hours long, and consist of 68 questions; 60 of which are multiple choice (5 choices each) and 8 are in depth questions, including mathematical calculations. The Final examination in IT-Sec III is a lab project.

Written examinations worldwide can usually be arranged at other universities, as well as at Swedish embassies and consulates.

Opportunity to complete the requirements via supplementary examination

No information inserted

Opportunity to raise an approved grade via renewed examination

No information inserted

Examiner

Ethical approach

  • All members of a group are responsible for the group's work.
  • In any assessment, every student shall honestly disclose any help received and sources used.
  • In an oral assessment, every student shall be able to present and answer questions about the entire assignment and solution.

Further information

Course room in Canvas

Registered students find further information about the implementation of the course in the course room in Canvas. A link to the course room can be found under the tab Studies in the Personal menu at the start of the course.

Offered by

Main field of study

Electrical Engineering

Education cycle

Second cycle

Add-on studies

No information inserted

Supplementary information

KTH was the first university in Northern Europe to establish academic computer forensics courses, in cooperation with national and international forensics agencies. Our courses are intended for working professionals, as well as for senior undergraduate, graduate and postgraduate students.

For Whom:

is a KTH graduate, who has worked professionally for 3-5 years, and now wants to come back to specialize in his/her field. Many of our professionals typically study one whole day each weekend and 2-3 evenings per week. Average study time in each course is typ. 15-22 hrs/week, depending on background and experience.

Course availability:

Our courses can be taken from anywhere in the World, as distant education courses. Over the years our students have been located in North and South America, Europe, Asia, Africa and Australia. In most cases you can even take the final exam in a foreign country.

Course Material:

Please review the course material, textbook(s), course notes and the course assignments before the course starts.

All of our course material is in English. In addition to the course textbook(s), we also make available about 1.5 Gigabyte of additional course material, including lectures, course notes, course assignments and reference material in each course, on three CDs (updated annually).

Whole day seminars / lectures / workshops:

In each course, we also offer four whole day (7h) Saturday seminars / lectures at KTH in Stockholm during each semester. Attendance is voluntary, but highly recommended. Recordings are made available to students with learning disabilities.

SSS:

A custom-designed student support system (SSS) enables our students keep their contact info updated, obtain course information, submit course assignments and course papers – and receive immediate receipt in writing on all submissions 24/7 from anywhere in the World. SSS was specifically designed to work through most government and corporate firewalls.

Admission:

KTH Students should contact their Academic Advisor or program coordinator. External Students should apply through the national website for higher education:http://www.antagning.se

Contact

Course Director & Examiner:

L.O. Stromberg

los@kth.se

+46 8 790 9800

(Skype videoconf. available)

Education officer:

Asser Blomster

asser@kth.se

+46 8 790 9518 

Bookstore:

The textbooks and the course notes are available from the university bookstore in Haninge:

bokservice@sth.kth.se

+46 8 790 4885

Contract courses:

KTH Education

Harald Sammer

sammer@kth.se

+46 8 790 0770

 

Course admission:

KTH Students should contact their Academic Advisor or program coordinator. Swedish students should apply at:http://www.antagning.se. International students should apply through the national website for higher education:http://www.universityadmissions.se

Admission questions:

KTH Admissions

antagning@kth.se

+46 8 790 9440

Updated Course Info:

SSS - Student Support System

Once you have been admitted into one of our courses, please go to our course web site at http://ia1.org/courseinfo and enter in your contact info in this course (incl. two working email addresses), in order for you to receive updated course info.

To obtain our detailed course information in English, please send an e-mail tostudentsupportsystem@gmail.com and write Courseinfo in the subject line.