IT438 Advanced Computer Forensics (3 cr.)

This course presents the theories and techniques for investigating intrusions and illegal activities that occur in information systems. Students work in a computer lab setting to investigate cybercrimes and gather evidence of unlawful activities.  Students also evaluate the use of various software forensic tools and related technologies.  The use of firewalls, intrusion detection systems, encryption, virtual private networks, and operating system hardening are examined.  Students use open source technologies to evaluate security breaches and protect various information systems.

Upon completion of this course, students are expected to be able to do the following:

1. Examine the variety of network security issues that enable hackers to breach information systems.
2. Evaluate the various ways that hackers can access information.
3. Analyze the encryption and security policies of a system.
4. Evaluate problems associated with operating system features and settings.
5. Evaluate defenses against virus attacks, Trojan horses, and spyware.
6. Analyze computer-based espionage and terrorism.
7. Synthesize concepts behind penetration testing phases.
8. Integrate the use of reconnaissance tools and produce reconnaissance against prepared targets.
9. Use various forensic tools to provide solution-based results to mitigate security issues.