Digital Forensics (DIF)
3. Semester
5 ECTS | 4 SWS
Homework (HA)
Digital Forensics: Analyze digital evidence from multiple sources, preserve forensic evidence, and reconstruct IT incidents using professional forensic methods.
Contents
- Traditional forensic sciences and digital forensics
- Fundamentals of digital forensics
- Digital traces (origin, manipulability and copyability, personal nature)
- Data sources for forensic investigations (e.g., desktop, tablet, smartphone, network, car, IoT)
- Analysis with forensic tools (Sleuthkit, Autopsy)
- Hash functions in digital forensics
- Forensic procedure models and preparation of evidence reports
Competencies
Students are able to
- describe the fundamentals of digital forensics and its subfields and can apply them.
- describe the creation, manipulability, and copyability of digital traces, as well as their personal nature.
- describe the basic concept and characteristics of common file systems and use this knowledge to perform a file system analysis.
- describe the basic steps of an IT forensic investigator and can confidently use general and specialized forensic tools.
- describe cryptographic hash functions and are familiar with their role in digital forensics.
- name common forensic tools and are able to extract digital traces from them.
- work according to the basic principles of IT forensics and are able to apply them in a forensic investigation.
Literature
- Bundesamt für Sicherheit in der Informationstechnik, "Leitfaden IT-Forensik", Version 1.0.1, https://www.bsi.bund.de/DE/Themen/Oeffentliche-Verwaltung/Sicherheitspruefungen/IT-Forensik/forensik_node.html
- Alexander Geschonneck: Computer-Forensik. Computerstraftaten erkennen, ermitteln, aufklären. 6. aktualisierte und erweiterte Auflage. dpunkt Verlag, Heidelberg 2014,ISBN 978-3-86490-133-1.
- Eoghan Casey (Hrsg.): Handbook of computer crime investigation. Forensic tools and technology. 6th Printing. Elsevier Academic Press, Amsterdam u. a. 2007, ISBN 978-0-12- 163103-1.
Lecturer
- Prof. Dr. Jessica Steinberger
Recommended Previous Knowledge
-
Knowledge of digital number representations and encodings (e.g., ASCII)
-
Basic programming skills
Module Details
| Semester |
3 |
| Lecture Language |
German |
|
Frequency
|
Winter Term
|
| Credit Points (ECTS)
|
5 |
| Course Coordinator |
Prof. Dr. Jessica Steinberger |
| Duration |
1 Semester |
|
Course Achievement
|
None |
|
Prerequisite for exam
|
Compulsory Assignment (PU) |
|
Exam
|
Homework (HA) |
Weekly Hours (SWS)
| Lecture |
2 SWS |
| Exercises |
2 SWS |
| Sum |
4 SWS |
Work Load
| Lecture |
30 h |
| Self Study |
90 h |
| Assignments |
30 h |
| Sum |
150 h |
