HI2009 IT-Security III: Computer Forensics Lab 7.5 credits

• Educational level

  Second cycle

• Academic level (A-D)

  D

• Subject area

  Electrical Engineering
  

• Grade scale

  A, B, C, D, E, FX, F

• Course page on KTH Social

Learning outcomes

The course goal is to enable the student to work with typical Computer Forensics tools, as a continuation to th Computer Forensics theory studied in the IT-Sec II Computer Forensics course.

Course main content

How to use typical Computer Forensics tools and techniques. Hard disk analysis, Mobile phone analysis, Sniffers, Network Monitoring. Wireless Surveillance.

Disposition

This is a distant learning course. All course material is in English. This course is the continuation of IT-Sec I and IT-Sec II Computer Forensics courses.

Eligibility

Knowledge corresponding to HI119V IT-Sec II and documented proficiency in English corresponding to English B.

Prerequisites

Knowledge corresponding to HI119V IT-Sec II.

Literature

Investigation;

Forensic Tools & Technology,

Eoghan Casey, 2001, 448 pp

Academic Press,

ISBN-10: 0121631036

ISBN-13: 9780121631031

Real Digital Forensics,

Jones, Bejtlich & Rose,

Addison-Wesley, 2005, 650 pp

ISBN-10: 0321240693

ISBN-13: 9780321240699

Digital Course Notes

IT-Sec III, 3 CDs, 1.5 GB, L.O.Stromberg

Required equipment

You will need:                      

   * A personal computer (PC) running  Windows XP / Vista / 7

   * Internet access                                      

   * two working email addresses (do not use free webmail clients, use POP3)

   * A scientific pocket calculator

Examination

• LAB1 - Laboratory Work, 1.5 credits, grade scale: P, F
• LAB2 - Laboratory Work, 1.5 credits, grade scale: P, F
• LAB3 - Laboratory Work, 1.5 credits, grade scale: P, F
• TEN1 - Examination, 3.0 credits, grade scale: A, B, C, D, E, FX, F

Examinations are offered three times a year: typically the first Saturday in May, August, and December.

Written examinations are four hours long, and consist of 68 questions; 60 of which are multiple choice (5 choices each) and 8 are in depth questions, including mathematical calculations. The Final examination in IT-Sec III is a lab project.

Written examinations worldwide can usually be arranged at other universities, as well as at Swedish embassies and consulates.

Offered by

STH/Computer and Electrical Engineering

Contact

Asser Blomster, tel 08 7909518, e-mail: asser@kth.se

Examiner

Lars O Strömberg <los@kth.se>

Supplementary information

KTH was the first university in Northern Europe to establish academic computer forensics courses, in cooperation with national and international forensics agencies. Our courses are intended for working professionals, as well as for senior undergraduate, graduate and postgraduate students.

For Whom:

is a KTH graduate, who has worked professionally for 3-5 years, and now wants to come back to specialize in his/her field. Many of our professionals typically study one whole day each weekend and 2-3 evenings per week. Average study time in each course is typ. 15-22 hrs/week, depending on background and experience.

Course availability:

Our courses can be taken from anywhere in the World, as distant education courses. Over the years our students have been located in North and South America, Europe, Asia, Africa and Australia. In most cases you can even take the final exam in a foreign country.

Course Material:

Please review the course material, textbook(s), course notes and the course assignments before the course starts.

All of our course material is in English. In addition to the course textbook(s), we also make available about 1.5 Gigabyte of additional course material, including lectures, course notes, course assignments and reference material in each course, on three CDs (updated annually).

Whole day seminars / lectures / workshops:

In each course, we also offer four whole day (7h) Saturday seminars / lectures at KTH in Stockholm during each semester. Attendance is voluntary, but highly recommended. Recordings are made available to students with learning disabilities.

SSS:

A custom-designed student support system (SSS) enables our students keep their contact info updated, obtain course information, submit course assignments and course papers – and receive immediate receipt in writing on all submissions 24/7 from anywhere in the World. SSS was specifically designed to work through most government and corporate firewalls.

Admission:

KTH Students should contact their Academic Advisor or program coordinator. External Students should apply through the national website for higher education:http://www.antagning.se

Contact

Course Director & Examiner:

L.O. Stromberg

los@kth.se

+46 8 790 9800

(Skype videoconf. available)

Education officer:

Asser Blomster

asser@kth.se

+46 8 790 9518 

Bookstore:

The textbooks and the course notes are available from the university bookstore in Haninge:

bokservice@sth.kth.se

+46 8 790 4885

Contract courses:

KTH Education

Harald Sammer

sammer@kth.se

+46 8 790 0770

 

Course admission:

KTH Students should contact their Academic Advisor or program coordinator. Swedish students should apply at:http://www.antagning.se. International students should apply through the national website for higher education:http://www.universityadmissions.se

Admission questions:

KTH Admissions

antagning@kth.se

+46 8 790 9440

Updated Course Info:

SSS - Student Support System

Once you have been admitted into one of our courses, please go to our course web site at http://ia1.org/courseinfo and enter in your contact info in this course (incl. two working email addresses), in order for you to receive updated course info.

To obtain our detailed course information in English, please send an e-mail tostudentsupportsystem@gmail.com and write Courseinfo in the subject line.

Version

Course plan valid from: Autumn 09.
Examination information valid from: Autumn 09.