CJ446 The Criminalistics of Computer Forensics [Onsite]

Transcription

1 CJ446 The Criminalistics f Cmputer Frensics [Onsite] Curse Descriptin: This curse intrduces the student t system frensics investigatin and respnse including prcedures fr investigating cmputer and cybercrimes and cncepts fr cllecting, analyzing, recvering and preserving frensic evidence. Prerequisite(s) and/r Crequisite(s): Prerequisites: CJ243 The Criminalistics f Cybercrime Credit hurs: 4 Cntact hurs: 50 (30 Thery Hurs, 20 Lab Hurs)

2 : The Criminalistics f Cmputer Frensics Instructr: Office hurs: Class hurs: Majr Instructinal Areas 1. The rle f cmputer hardware and sftware in cmputer crime investigatins 2. Classificatin f high-tech crimes and criminality 3. Tracking and tracing f high-tech criminals 4. Investigatin f nline sexual predatrs and pedphiles 5. Applicatin f the Furth Amendment in investigating high-tech crime 6. Prtcls fr seizing digital evidence 7. Analysis f digital evidence 8. Examinatin f digital evidence Curse Objectives 1. Recgnize the specific hardware, sftware, and media cmpnents f cmputer systems and their imprtance t cmputer frensics. 2. Identify types f digital evidence and lcatins where they are fund. 3. Explain cmmn -based high-tech criminal ffenses and specific investigative prtcls fr each type f ffense. 4. Identify scams and ther frms f high-tech frauds, the devices used t cmmit these frauds, and the techniques t investigate them. 5. Examine the high-tech methds that terrrists and drug traffickers use. 6. Describe the different types f hackers and hw they perate. 7. Define Internet cmmunicatins prtcls, Internet data ruting rules and patterns, and tls and techniques used t trace Internet cmmunicatins back t their surce.

3 8. Describe practices and techniques that predatry pedphiles use fr enticing children nline and prducing and sharing child prngraphy. 9. Define investigative prtcls used t lcate, btain, and preserve digital evidence f nline child enticement r the manufacture r sharing f child prngraphy. 10. Describe federal laws and cnstitutinal rights applicable t the investigatin and prsecutin f high-tech crime. 11. Define prcedures and legal issues regarding the distributin f digital evidence and frensic sftware reprts t the defense during pretrial discvery. 12. Identify types f search warrants and subpenas utilized t btain digital evidence, subscriber recrds, and ther evidences frm high-tech surces such as Internet Service Prviders (ISPs). 13. Explain prtcls t dcument, seize, transprt, and stre high-tech evidence. 14. Examine digital evidence using cmputer frensic sftware. 15. Analyze digital evidence using cmputer frensic sftware. SCANS Objectives SCANS is an acrnym fr Secretary s Cmmissin n Achieving Necessary Skills. The cmmittee, created by the Natinal Secretary f Labr in the early 1990s, created a list f skills and cmpetencies that the cmmittee feels are necessary fr emplyees t functin in a hightech jb market. 1. Cmplete the assignments while maintaining academic integrity and hnesty. 2. Demnstrate the ability t utilize traditinal and electrnic library surces. 3. Identify the need fr data, evaluate infrmatin, and cmmunicate the results t thers in written, graphical, and pictrial frmats. 4. Juxtapse tw theries, and defend ne f the tw. 5. Cmmunicate ideas t justify psitins. 6. Interpret and respnd t written and verbal messages and ther cues. 7. Lcate and interpret written infrmatin. 8. Develp critical-reading skills and thinking prcesses. 9. Apply technlgy t tasks. 10. Select a technlgy. 11. Use cmputers t prcess infrmatin.

4 Curse Outline Unit 1 Cmputer Hardware, Sftware, and Operating Systems Activities Cntent Cvered: Investigating High-Tech Crime: Chapter 1, Cmputer Hardware, Sftware, and the Internet, pp Chapter 2, Intrductin t Operating Systems, pp Writing Assignment: 1 Research Assignment: 1 and 2 Lab: 1 2 High-Tech Criminal Offenses and -Based Crimes Chapter 3, High-Tech Criminal Offenses and -Based Crimes, pp Writing Assignment: 1 Research Assignment: 1 Curse Prject: Intrductin Lab: 1 3 High-Tech Frauds Chapter 4, High-Tech Frauds, pp Writing Assignment: 1 and 2 Research Assignment: 1 Lab: 1 4 High-Tech Vice Crimes, Hackers, and Terrrists Chapter 5, High-Tech Vice Crimes, Hackers, and Terrrists, pp Writing Assignment: 1

5 Unit Activities Research Assignment: 1 Lab: 1 5 Tracking and Tracing Internet Crimes Chapter 6, Tracking and Tracing Internet Crimes, pp Writing Assignment: 1 and 2 Research Assignment: 1 Lab: 1 6 Pedphiles, Online Child Enticement, and Child Prngraphy Chapter 7, Pedphiles, Online Child Enticement, and Child Prngraphy, pp Writing Assignment: 1 Research Assignment: 1 Research Assignment: 2 7 Legal Issues Chapter 9, Legal Issues, pp Writing Assignment: 1 Research Assignment: 1 Lab: 1 8 Handling f Digital Evidence Chapter 10, Handling Digital Evidence, pp Writing Assignment: 1 Research Assignment: 1 Lab: 1 9 Examinati n f Digital Evidence: Part 1 Chapter 11, Develping a Cmputer Frensics Unit, pp Curse Prject: Submissin Lab: 1

6 Unit 10 Examinatin f Digital Evidence: Part 2 Activities Review the material frm Investigating High-Tech Crime: Chapter 10, Handling Digital Evidence, pp Chapter 11, Develping a Cmputer Frensics Unit, pp Lab: 1 11 Curse Review and Final Exam Final Exam Instructinal Methds This curse will help yu understand basic cncepts related t cmputer frensics. Yu will examine theretical as well as practical aspects f cmputer frensics with the help f the textbk, writing assignments, exams, and research and analysis. A detailed prject during the curse will help yu apply yur understanding and perspectives n the effectiveness f the prcedures fr investigating cmputer and cybercrimes. Yu will als apply yur understanding f the cncepts t cllecting, analyzing, recvering, and preserving frensic evidence. Instructinal Materials and References Student Textbk Package Knetzger, Michael, and Jeremy Muraski. Investigating High-Tech Crime. Upper Saddle River, NJ: Prentice Hall, AccessData Ultimate Tlkit, Dem Versin. Cntains: Frensic Tlkit Passwrd Recvery Tlkit Distributed Netwrk Attack Registry Viewer FTK Imager Recmmended Resurces

7 A Universal Serial Bus (USB) key 512 MB r larger t stre sftware utilities used in labs, assignments, and ther digital evidence files placed by the instructr References ITT Tech Virtual Library Lg n t the ITT Tech Virtual Library at t access nline bks, jurnals, and ther reference resurces selected t supprt ITT Tech curricula. Bks Yu may click Bks r use the Search functin n the hme page t find the fllwing bks: Bks> Ebrary: Greenfield, Rbert S. and Albert J. Marcella. eds., Cyber Frensics: A Field Manual fr Cllecting, Examining and Preserving Evidence f Cmputer Crimes. Auerbach Publishers, Incrprated, Peridicals Yu may click Peridicals r use the Search functin n the hme page t find the fllwing peridicals. Peridicals> PrQuest> PrQuest Criminal Justice Peridicals: Intrductin t sftware frensics. Rbert M Slade. Cmputer Security Jurnal. San Francisc: Winter Vl. 21, Iss. 1; p. 21 Cmputer frensics: the new, must-have skill. Gerry Blackwell. Canadian Lawyer. Aurra: Jul Vl. 29, Iss. 7; p. 10 Crss-examining the cmputer frensics expert. Craig Ball. Trial. Washingtn: Jul Vl. 40, Iss. 7; p. 78 New Cmputer Frensics Tls. Tim Dees. Law & Order. Wilmette: Jun Vl. 52, Iss. 6; p. 24 (2 pages)

8 Cmputer Frensics: Characteristics and Preservatin f Digital Evidence Lren D Mercer. FBI Law Enfrcement Bulletin. Washingtn: Mar Vl. 73, Iss. 3; p. 28 (5 pages) Digital evidence standards. Annymus. Law & Order. Wilmette: Sep Vl. 51, Iss. 9; p. 6 Digital tls frm NIST. Peter Piazza. Security Management. Arlingtn: Feb Vl. 47, Iss. 2; p. 30 (1 page) Cmputer Frensics: Incident Respnse Essentials Maria Kiriakva. Law Enfrcement News. New Yrk: Apr 30, Vl. 28, Iss. 576; p. S4 Hurdles t cyberjustice. Peter Piazza. Security Management. Arlingtn: Aug Vl. 45, Iss. 8; p. 45 (1 page) Other References The fllwing resurces can be fund utside f the ITT Tech Virtual Library, whether nline r in hard cpy. Web sites: (accessed n July 9, 2007) This Web site presents an insight int tpics such as intellectual prperty, cmputer crimes and electrnic evidence. (accessed n July 9, 2007) This Web site belngs t Cmputer Security Institute (CSI), which serves the needs f Infrmatin Security Prfessinals thrugh membership, educatinal events, security surveys and awareness tls. (accessed n July 9, 2007) This Web site prvides highly infrmative cntent n the latest advancements n Infrmatin prtectin. (accessed n July 9, 2007)

9 This Web site prvides imprtant infrmatin fr private investigatrs. (accessed n July 9, 2007) The website ffers Jurnals, newsletters and digest f debates, news, research, discussins f legal, scial and ther issues related t cmputer culture. (accessed n July 9, 2007) This Web site presents current issues, tips, news n infrmatin security. (accessed n July 9, 2007) This Web site fcuses n the legal issues cybercrime raises (accessed n July 9, 2007) The Web site fcuses n unique infrmatin n cyber crime laws. (accessed n July 9, 2007) This Web site f Reginal Cmputer Frensics labratry ffers access t the premier digital frensics labratry netwrk in the cuntry (accessed n July 9, 2007) An nline hacker magazine that presents latest related articles All links t Web references utside f the ITT Tech Virtual Library are always subject t change withut prir ntice.

10 Curse Evaluatin and Grading Evaluatin Criteria The final grades will be based n the fllwing categries: CATEGORY WEIGHT Writing Assignments 10% Research Assignments 15% Curse Prject 25% Labs 25% Final Exam 25% Ttal 100% Grade Cnversin Table The final grades will be calculated frm the percentages earned in the curse, as fllws: A % 4.0 B % 3.5 B 80 84% 3.0 C % 2.5 C 70 74% 2.0 D % 1.5 D 60 64% 1.0 F <60% 0.0 (End f )