Course - Cybercrime Investigation - IMT4130
IMT4130 - Cybercrime Investigation
About
New from the academic year 2016/2017
Examination arrangement
Examination arrangement: Written examination
Grade: Letters
Evaluation | Weighting | Duration | Grade deviation | Examination aids |
---|---|---|---|---|
Written examination | 100/100 | 3 timer |
Course content
Digital Forensics Ontology
File carving and reconstruction
Multi-media forensics
Malware Forensics: static, dynamic, content
Memory Forensics
Fraud detection and analysis
Open source Intelligence and Internet forensics
Cloud forensics
Search for digital evidence
Selected topics, as for example: Identity Theft, Bitcoin and Dark Net investigation
Guest lectures, as for example: Cooperate Forensics, Embedded device forensics,
Laboratory to forensic case scenarios, investigation report and mock trail
Learning outcome
Knowledge:
Candidates develop deep understanding in the methodology, technology and application of digital forensics in cybercrime investigation.
Candidates are expected to reach an advanced level of knowledge in the broad spectrum of digital evidence, analysis methods and tools.
The course is oriented towards profound theoretical background, where the students learn contemporary techniques, best practices, and advanced topics.
Skills:
Candidates are capable of analyzing existing theories, methods and interpretations in the field of digital forensics and working independently on solving theoretical and practical problems related to cybercrime investigation.
Candidates can use relevant methods in independent studies and development in digital forensics.
Candidates are capable of performing critical analysis of various literature sources and applying them in structuring and formulating problem-oriented reasoning in cybercrime investigation.
Candidates are capable of carrying out an independent limited study or development project in cybercrime investigation under supervision, following the applicable ethical rules.
General competence:
Candidates are capable of analyzing relevant professional and research ethical problems in cybercrime investigation.
Candidates are capable of applying their knowledge and skills in new fields, in order to accomplish advanced tasks and projects in cybercrime investigation.
Candidates can work independently and are familiar with terminology of cybercrime investigation.
Candidates are capable of discussing professional problems, analyses and conclusions in the field of digital forensics, both with specialists and with general audience.
Candidates are capable of contributing to innovation and innovation processes.
Learning methods and activities
Forelesninger|Lab.øvelser|Nettstøttet læring
Further on evaluation
Utfyllende om kontinuasjon:
Ordinary re-sit examination in August.
Specific conditions
Admission to a programme of study is required:
Information Security (MIS)
Information Security (MISD)
Information Security (MISEB)
Recommended previous knowledge
IMT4114 Introduction to Digital Forensics or IMT4012 Digital Forensics 1 or IMT4009 Digital Forensic Methodology, or equivalent.
Course materials
The following textbook is the primary reference. Additional sources, e.g. presentation material and 10 selected papers will be provided during the course.M.Ligh, S.Adair, B.Hartstein and M.Richard (2010). Malware Analyst's Cookbook and DVD: Tools and Techniques for Fighting Malicious Code.
Credit reductions
Course code | Reduction | From | To |
---|---|---|---|
IMT4022 | 7.5 |
No
Version: 1
Credits:
7.5 SP
Study level: Second degree level
Term no.: 1
Teaching semester: SPRING 2017
Language of instruction: English
-
- Information Security
- Lasse Øverlier
Department with academic responsibility
Department of Information Security and Communication Technology
Examination
Examination arrangement: Written examination
- Term Status code Evaluation Weighting Examination aids Date Time Examination system Room *
- Spring ORD Written examination 100/100 2017-06-14 10:00
-
Room Building Number of candidates
- * The location (room) for a written examination is published 3 days before examination date. If more than one room is listed, you will find your room at Studentweb.
For more information regarding registration for examination and examination procedures, see "Innsida - Exams"