Course - Forensic Tool Development - IMT4505-PHS
IMT4505-PHS - Forensic Tool Development
About
Examination arrangement
Examination arrangement: Assignment and Oral examination
Grade: Letters
Evaluation | Weighting | Duration | Grade deviation | Examination aids |
---|---|---|---|---|
Assignment/Oral examination | 100/100 |
Course content
The field of digital forensics and cybercrime investigation is expanding rapidly. The ability to develop software solutions to handle problems in these areas is of paramount importance in the continued success of these techniques in court proceedings. This course examines the means by which forensic tools are developed. Students will progress from basic programming, to the development of large-scale forensic solutions. As the ultimate aim of every case is its successful prosecution in a courtroom, students will see how the forensic tools are tested and validated using scientific methodologies, thus ensuring that any evidence acquired through the use of these tools will be admissible in court.
Learning outcome
Knowledge
After completing the course, candidates will have knowledge of:
- general programming concepts in both imperative and object-oriented paradigms
- methods of forensic tool testing and validation
- legal issues related to the admissibility of digital evidence in court proceedings both in the Nordic countries and internationally
Skills
- After completing the course, candidates will be able to:
- develop large-scale forensic applications
- compare the performance of forensic tools
- evaluate the validity of the results returned by forensic tools
- present the results of new tools in the courtroom
General competence
- After completing the course, candidates will be able to:
- perform professional tasks in the role of digital forensic investigator with increased insight and confidence
- see the role of digital forensics in a broader perspective during an investigation
- identify ethical and legal issues during investigation
Learning methods and activities
Nettbasert Læring|Oppgaveløsning|Annet
Utfyllende informasjon:
This course will be delivered on-line through a combination of lectures, exercises, quizzes and assignments.The approximate duration of the module is 280 hours.Students may choose to study at their own pace within the semester. However, it is expected that the course is completed within 4 months. Since software development is a practical skill, students will be presented with numerous exercises throughout the course to ensure that they have sufficient practical exposure.Student support will be delivered via electronic means such as: email, discussion fora, chat and virtual classrooms.An e-learning platform is used for the administration and implementation of the module (PHS It´s Learning/PingPong).
Obligatoriske arbeidskrav:
Successful completion of up to 10 on-line MCQ tests throughout the course. Students may have multiple attempts at these tests if necessary.
Compulsory assignments
- Coursework Requirements
Further on evaluation
Utfyllende om kontinuasjon:
The project must be retaken next time the course is running.
Vurderingsformer:
The programme concludes with an examination consisting of two parts:
Submission of software development project
An oral examination based on the project
Both parts of the examination must be passed. An overall grade is given, which may be adjusted one step up or down based on oral examination.
Specific conditions
Admission to a programme of study is required:
Information Security (MISEB)
Recommended previous knowledge
NCFI2 or similar, admission criteria for MISEB program and for all courses delivered by PHS (Politihøgskolen).
Course materials
Students will be examined on all material published in the lessons, and a number of specific web resources and research articles (both technical and legal) which are provided to students during the course. These form part of the mandatory reading requirements and will be examinable.In addition, students may wish to refer to the following books:
Lutz, M. (2013) Learning Python(5th
Ed.), O'Reilly Media, ISBN: 1449355730
O'Connor, T. J. (2012)Violent Python: A Cookbook for Hackers, Forensic Analysts, Penetration Testers and Security Engineers.Syngress, ISBN: 1597499579
Downey, A. B. (2012),Think Python, O'Reilly Media, ISBN 144933072X
Students may wish to refer to the following web resources:
Official Python Documentation [https://docs.python.org/2/]
A collection of Python Tutorials: [http://www.tutorialspoint.com/python/]
No
Version: 1
Credits:
10.0 SP
Study level: Second degree level
Term no.: 1
Teaching semester: SPRING 2017
Language of instruction: English
-
- Information Security
Department with academic responsibility
Department of Information Security and Communication Technology
Examination
Examination arrangement: Assignment and Oral examination
- Term Status code Evaluation Weighting Examination aids Date Time Examination system Room *
-
Spring
ORD
Assignment/Oral examination
100/100
Submission
2017-05-12 -
Room Building Number of candidates
- * The location (room) for a written examination is published 3 days before examination date. If more than one room is listed, you will find your room at Studentweb.
For more information regarding registration for examination and examination procedures, see "Innsida - Exams"