How to use typical Computer Forensics tools and techniques. Hard disk analysis, Mobile phone analysis, Sniffers, Network Monitoring. Wireless Surveillance.
HI2009 IT-Security III: Computer Forensics Lab 7.5 credits
Information per course offering
Course offerings are missing for current or upcoming semesters.
Course syllabus as PDF
Please note: all information from the Course syllabus is available on this page in an accessible format.
Course syllabus HI2009 (Autumn 2011–)Content and learning outcomes
Course contents
Intended learning outcomes
The course goal is to enable the student to work with typical Computer Forensics tools, as a continuation to th Computer Forensics theory studied in the IT-Sec II Computer Forensics course.
Literature and preparations
Specific prerequisites
Knowledge corresponding to HI119V IT-Sec II and documented proficiency in English corresponding to English A/English 5.
Recommended prerequisites
Knowledge corresponding to HI119V IT-Sec II.
Equipment
You will need:
* A personal computer (PC) running Windows XP / Vista / 7/8
* Internet access
* two working email addresses (do not use free webmail clients, use POP3)
* A scientific pocket calculator
Literature
Kursmaterial kan rekvireras från Högskolans Bokservice på Campus Haninge, telefon: 08-790 4885; e-post: bokservice@sth.kth.se.
Kurslitteratur: Real Digital Forensics, Jones, Bejtlich & Rose, Addison-Wesley, ISBN-10: 0321240693, ISBN-13:9780321240699.
Forensic Tools & Technology, Eoghan Casey, 2001, 448 pp, Academic Press,ISBN-10: 0121631036, ISBN-13: 9780121631031
Kurskompendium HI2009 på CD-ROM med laborationsmaterial, studieanvisningar och övningsuppgifter, programvara och referensmaterial. Förf. L.O. Strömberg.
Vi utgår från att studenterna redan har kursmaterialet från HI119V, och vi kommer i kursen att använda mjukvara och annat material som återfinnes i HI119V:s digitala kurskompendium och lab-kit (HI119V är
förkunskapskrav till denna kurs).
Examination and completion
If the course is discontinued, students may request to be examined during the following two academic years.
Grading scale
Examination
- LAB1 - Laboratory Work, 1.5 credits, grading scale: P, F
- LAB2 - Laboratory Work, 1.5 credits, grading scale: P, F
- LAB3 - Laboratory Work, 1.5 credits, grading scale: P, F
- TEN1 - Examination, 3.0 credits, grading scale: A, B, C, D, E, FX, F
Based on recommendation from KTH’s coordinator for disabilities, the examiner will decide how to adapt an examination for students with documented disability.
The examiner may apply another examination format when re-examining individual students.
Examinations are offered three times a year: typically the first Saturday in May, August, and December.
Written examinations are four hours long, and consist of 68 questions; 60 of which are multiple choice (5 choices each) and 8 are in depth questions, including mathematical calculations. The Final examination in IT-Sec III is a lab project.
Written examinations worldwide can usually be arranged at other universities, as well as at Swedish embassies and consulates.
Opportunity to complete the requirements via supplementary examination
Opportunity to raise an approved grade via renewed examination
Examiner
Ethical approach
- All members of a group are responsible for the group's work.
- In any assessment, every student shall honestly disclose any help received and sources used.
- In an oral assessment, every student shall be able to present and answer questions about the entire assignment and solution.
Further information
Course room in Canvas
Offered by
Main field of study
Education cycle
Add-on studies
Supplementary information
KTH was the first university in Northern Europe to establish academic computer forensics courses, in cooperation with national and international forensics agencies. Our courses are intended for working professionals, as well as for senior undergraduate, graduate and postgraduate students.
For Whom:
is a KTH graduate, who has worked professionally for 3-5 years, and now wants to come back to specialize in his/her field. Many of our professionals typically study one whole day each weekend and 2-3 evenings per week. Average study time in each course is typ. 15-22 hrs/week, depending on background and experience.
Course availability:
Our courses can be taken from anywhere in the World, as distant education courses. Over the years our students have been located in North and South America, Europe, Asia, Africa and Australia. In most cases you can even take the final exam in a foreign country.
Course Material:
Please review the course material, textbook(s), course notes and the course assignments before the course starts.
All of our course material is in English. In addition to the course textbook(s), we also make available about 1.5 Gigabyte of additional course material, including lectures, course notes, course assignments and reference material in each course, on three CDs (updated annually).
Whole day seminars / lectures / workshops:
In each course, we also offer four whole day (7h) Saturday seminars / lectures at KTH in Stockholm during each semester. Attendance is voluntary, but highly recommended. Recordings are made available to students with learning disabilities.
SSS:
A custom-designed student support system (SSS) enables our students keep their contact info updated, obtain course information, submit course assignments and course papers – and receive immediate receipt in writing on all submissions 24/7 from anywhere in the World. SSS was specifically designed to work through most government and corporate firewalls.
Admission:
KTH Students should contact their Academic Advisor or program coordinator. External Students should apply through the national website for higher education:http://www.antagning.se
Contact
Course Director & Examiner:
L.O. Stromberg
los@kth.se
+46 8 790 9800
(Skype videoconf. available)
Education officer:
Asser Blomster
asser@kth.se
+46 8 790 9518
Bookstore:
The textbooks and the course notes are available from the university bookstore in Haninge:
bokservice@sth.kth.se
+46 8 790 4885
Contract courses:
KTH Education
Harald Sammer
sammer@kth.se
+46 8 790 0770
Course admission:
KTH Students should contact their Academic Advisor or program coordinator. Swedish students should apply at:http://www.antagning.se. International students should apply through the national website for higher education:http://www.universityadmissions.se
Admission questions:
KTH Admissions
antagning@kth.se
+46 8 790 9440
Updated Course Info:
SSS - Student Support System
Once you have been admitted into one of our courses, please go to our course web site at http://ia1.org/courseinfo and enter in your contact info in this course (incl. two working email addresses), in order for you to receive updated course info.
To obtain our detailed course information in English, please send an e-mail tostudentsupportsystem@gmail.com and write Courseinfo in the subject line.