CJ446 The Criminalistics f Cmputer Frensics [Onsite] Curse Descriptin: This curse intrduces the student t system frensics investigatin and respnse including prcedures fr investigating cmputer and cybercrimes and cncepts fr cllecting, analyzing, recvering and preserving frensic evidence. Prerequisite(s) and/r Crequisite(s): Prerequisites: CJ243 The Criminalistics f Cybercrime Credit hurs: 4 Cntact hurs: 50 (30 Thery Hurs, 20 Lab Hurs)
: The Criminalistics f Cmputer Frensics Instructr: Office hurs: Class hurs: Majr Instructinal Areas 1. The rle f cmputer hardware and sftware in cmputer crime investigatins 2. Classificatin f high-tech crimes and criminality 3. Tracking and tracing f high-tech criminals 4. Investigatin f nline sexual predatrs and pedphiles 5. Applicatin f the Furth Amendment in investigating high-tech crime 6. Prtcls fr seizing digital evidence 7. Analysis f digital evidence 8. Examinatin f digital evidence Curse Objectives 1. Recgnize the specific hardware, sftware, and media cmpnents f cmputer systems and their imprtance t cmputer frensics. 2. Identify types f digital evidence and lcatins where they are fund. 3. Explain cmmn e-mail-based high-tech criminal ffenses and specific investigative prtcls fr each type f ffense. 4. Identify scams and ther frms f high-tech frauds, the devices used t cmmit these frauds, and the techniques t investigate them. 5. Examine the high-tech methds that terrrists and drug traffickers use. 6. Describe the different types f hackers and hw they perate. 7. Define Internet cmmunicatins prtcls, Internet data ruting rules and patterns, and tls and techniques used t trace Internet cmmunicatins back t their surce.
8. Describe practices and techniques that predatry pedphiles use fr enticing children nline and prducing and sharing child prngraphy. 9. Define investigative prtcls used t lcate, btain, and preserve digital evidence f nline child enticement r the manufacture r sharing f child prngraphy. 10. Describe federal laws and cnstitutinal rights applicable t the investigatin and prsecutin f high-tech crime. 11. Define prcedures and legal issues regarding the distributin f digital evidence and frensic sftware reprts t the defense during pretrial discvery. 12. Identify types f search warrants and subpenas utilized t btain digital evidence, subscriber recrds, and ther evidences frm high-tech surces such as Internet Service Prviders (ISPs). 13. Explain prtcls t dcument, seize, transprt, and stre high-tech evidence. 14. Examine digital evidence using cmputer frensic sftware. 15. Analyze digital evidence using cmputer frensic sftware. SCANS Objectives SCANS is an acrnym fr Secretary s Cmmissin n Achieving Necessary Skills. The cmmittee, created by the Natinal Secretary f Labr in the early 1990s, created a list f skills and cmpetencies that the cmmittee feels are necessary fr emplyees t functin in a hightech jb market. 1. Cmplete the assignments while maintaining academic integrity and hnesty. 2. Demnstrate the ability t utilize traditinal and electrnic library surces. 3. Identify the need fr data, evaluate infrmatin, and cmmunicate the results t thers in written, graphical, and pictrial frmats. 4. Juxtapse tw theries, and defend ne f the tw. 5. Cmmunicate ideas t justify psitins. 6. Interpret and respnd t written and verbal messages and ther cues. 7. Lcate and interpret written infrmatin. 8. Develp critical-reading skills and thinking prcesses. 9. Apply technlgy t tasks. 10. Select a technlgy. 11. Use cmputers t prcess infrmatin.
Curse Outline Unit 1 Cmputer Hardware, Sftware, and Operating Systems Activities Cntent Cvered: Investigating High-Tech Crime: Chapter 1, Cmputer Hardware, Sftware, and the Internet, pp. 1 27 Chapter 2, Intrductin t Operating Systems, pp. 29 49 Writing Assignment: 1 Research Assignment: 1 and 2 Lab: 1 2 High-Tech Criminal Offenses and E-mail-Based Crimes Chapter 3, High-Tech Criminal Offenses and E-mail-Based Crimes, pp. 51 92 Writing Assignment: 1 Research Assignment: 1 Curse Prject: Intrductin Lab: 1 3 High-Tech Frauds Chapter 4, High-Tech Frauds, pp. 97 116 Writing Assignment: 1 and 2 Research Assignment: 1 Lab: 1 4 High-Tech Vice Crimes, Hackers, and Terrrists Chapter 5, High-Tech Vice Crimes, Hackers, and Terrrists, pp. 119 142 Writing Assignment: 1
Unit Activities Research Assignment: 1 Lab: 1 5 Tracking and Tracing Internet Crimes Chapter 6, Tracking and Tracing Internet Crimes, pp. 147 180 Writing Assignment: 1 and 2 Research Assignment: 1 Lab: 1 6 Pedphiles, Online Child Enticement, and Child Prngraphy Chapter 7, Pedphiles, Online Child Enticement, and Child Prngraphy, pp. 183 207 Writing Assignment: 1 Research Assignment: 1 Research Assignment: 2 7 Legal Issues Chapter 9, Legal Issues, pp. 237 273 Writing Assignment: 1 Research Assignment: 1 Lab: 1 8 Handling f Digital Evidence Chapter 10, Handling Digital Evidence, pp. 277 302 Writing Assignment: 1 Research Assignment: 1 Lab: 1 9 Examinati n f Digital Evidence: Part 1 Chapter 11, Develping a Cmputer Frensics Unit, pp. 305 321 Curse Prject: Submissin Lab: 1
Unit 10 Examinatin f Digital Evidence: Part 2 Activities Review the material frm Investigating High-Tech Crime: Chapter 10, Handling Digital Evidence, pp. 277 302 Chapter 11, Develping a Cmputer Frensics Unit, pp. 305 321 Lab: 1 11 Curse Review and Final Exam Final Exam Instructinal Methds This curse will help yu understand basic cncepts related t cmputer frensics. Yu will examine theretical as well as practical aspects f cmputer frensics with the help f the textbk, writing assignments, exams, and research and analysis. A detailed prject during the curse will help yu apply yur understanding and perspectives n the effectiveness f the prcedures fr investigating cmputer and cybercrimes. Yu will als apply yur understanding f the cncepts t cllecting, analyzing, recvering, and preserving frensic evidence. Instructinal Materials and References Student Textbk Package Knetzger, Michael, and Jeremy Muraski. Investigating High-Tech Crime. Upper Saddle River, NJ: Prentice Hall, 2008. AccessData Ultimate Tlkit, Dem Versin. Cntains: Frensic Tlkit Passwrd Recvery Tlkit Distributed Netwrk Attack Registry Viewer FTK Imager Recmmended Resurces
A Universal Serial Bus (USB) key 512 MB r larger t stre sftware utilities used in labs, assignments, and ther digital evidence files placed by the instructr References ITT Tech Virtual Library Lg n t the ITT Tech Virtual Library at http://www.library.itt-tech.edu/ t access nline bks, jurnals, and ther reference resurces selected t supprt ITT Tech curricula. Bks Yu may click Bks r use the Search functin n the hme page t find the fllwing bks: Bks> Ebrary: Greenfield, Rbert S. and Albert J. Marcella. eds., Cyber Frensics: A Field Manual fr Cllecting, Examining and Preserving Evidence f Cmputer Crimes. Auerbach Publishers, Incrprated, 2002. Peridicals Yu may click Peridicals r use the Search functin n the hme page t find the fllwing peridicals. Peridicals> PrQuest> PrQuest Criminal Justice Peridicals: Intrductin t sftware frensics. Rbert M Slade. Cmputer Security Jurnal. San Francisc: Winter 2005. Vl. 21, Iss. 1; p. 21 Cmputer frensics: the new, must-have skill. Gerry Blackwell. Canadian Lawyer. Aurra: Jul 2005. Vl. 29, Iss. 7; p. 10 Crss-examining the cmputer frensics expert. Craig Ball. Trial. Washingtn: Jul 2004. Vl. 40, Iss. 7; p. 78 New Cmputer Frensics Tls. Tim Dees. Law & Order. Wilmette: Jun 2004. Vl. 52, Iss. 6; p. 24 (2 pages)
Cmputer Frensics: Characteristics and Preservatin f Digital Evidence Lren D Mercer. FBI Law Enfrcement Bulletin. Washingtn: Mar 2004. Vl. 73, Iss. 3; p. 28 (5 pages) Digital evidence standards. Annymus. Law & Order. Wilmette: Sep 2003. Vl. 51, Iss. 9; p. 6 Digital tls frm NIST. Peter Piazza. Security Management. Arlingtn: Feb 2003. Vl. 47, Iss. 2; p. 30 (1 page) Cmputer Frensics: Incident Respnse Essentials Maria Kiriakva. Law Enfrcement News. New Yrk: Apr 30, 2002. Vl. 28, Iss. 576; p. S4 Hurdles t cyberjustice. Peter Piazza. Security Management. Arlingtn: Aug 2001. Vl. 45, Iss. 8; p. 45 (1 page) Other References The fllwing resurces can be fund utside f the ITT Tech Virtual Library, whether nline r in hard cpy. Web sites: http://www.cybercrime.gv/ (accessed n July 9, 2007) This Web site presents an insight int tpics such as intellectual prperty, cmputer crimes and electrnic evidence. http://www.gcsi.cm/ (accessed n July 9, 2007) This Web site belngs t Cmputer Security Institute (CSI), which serves the needs f Infrmatin Security Prfessinals thrugh membership, educatinal events, security surveys and awareness tls. http://all.net/ (accessed n July 9, 2007) This Web site prvides highly infrmative cntent n the latest advancements n Infrmatin prtectin. http://crimetime.cm/ (accessed n July 9, 2007)
This Web site prvides imprtant infrmatin fr private investigatrs. http://cu-digest.rg/ (accessed n July 9, 2007) The website ffers Jurnals, newsletters and digest f debates, news, research, discussins f legal, scial and ther issues related t cmputer culture. http://searchsecurity.techtarget.cm/ (accessed n July 9, 2007) This Web site presents current issues, tips, news n infrmatin security. http://law.udaytn.edu/cybercrimes (accessed n July 9, 2007) This Web site fcuses n the legal issues cybercrime raises http://www.cmputerfrensicswrld.cm/ (accessed n July 9, 2007) The Web site fcuses n unique infrmatin n cyber crime laws. http://www.rcfl.gv/ (accessed n July 9, 2007) This Web site f Reginal Cmputer Frensics labratry ffers access t the premier digital frensics labratry netwrk in the cuntry http://artfhacking.cm/files/phrack/index.htm (accessed n July 9, 2007) An nline hacker magazine that presents latest related articles All links t Web references utside f the ITT Tech Virtual Library are always subject t change withut prir ntice.
Curse Evaluatin and Grading Evaluatin Criteria The final grades will be based n the fllwing categries: CATEGORY WEIGHT Writing Assignments 10% Research Assignments 15% Curse Prject 25% Labs 25% Final Exam 25% Ttal 100% Grade Cnversin Table The final grades will be calculated frm the percentages earned in the curse, as fllws: A 90 100% 4.0 B+ 85 89% 3.5 B 80 84% 3.0 C+ 75 79% 2.5 C 70 74% 2.0 D+ 65 69% 1.5 D 60 64% 1.0 F <60% 0.0 (End f )