CMPS 5443-4883: Computer Forensics

Summer semester 2006

Instructor: Dr. Nelson L. Passos
Office: Bolin Science Hall 126B
Office phone: 397-4129
E-mail: nelson.passos@mwsu.edu
Office Hours: MW          9:00 - 12:00 am
TR            1:00 - 3:00 pm
Class Hours:

M-R  5:00 - BO 320

 

Course Description:

Study of techniques used to identify attacks to computer systems and recover data to be used as evidence in any sort of investigation. Includes an introduction to criminal forensics, evaluation of security flaws, network attacks, information hiding, protection tools. It also includes an introduction to PERL scripts and data communication.


Text book:
Windows Forensics and Incident Recovery, by Harlan Carvey

Lecture Notes:

CMPS 5443/4883-part 1

CMPS 5443/4883-part 2

CMPS 5443/4883-part 3

CMPS 5443/4883-part 4

CMPS 5443/4883-part 5

CMPS 5443/4883-part 6

CMPS 5443/4883-part 7

CMPS 5443/4883-part 8

Agenda: 

July     August    Grading

July

 

Jul 5-    

Introduction to computer forensics - Ethics

Jul 6-    

Introduction to computer forensics - Fundamentals

Jul 10-

File Systems - Computer communication – OSI and TCP/IP

Jul 11-

Computer communication – OSI and TCP/IP

Jul 12-

Introduction to Perl

Jul 13-

Introduction to Perl

Jul 17-

Security incidents

Jul 18-

Test # 1

Jul 19-

Hiding data

Jul 20-

Hiding data

Jul 24-

Anticipating problems

Jul 25-

Some tools

Jul 26-

Rootkits and other clues

Jul 27-

Scanners and Sniffers

Jul 31-

Scanners and Sniffers

 


August

Aug 1-

Presentations/discussion

Aug 2-

Presentations/discussion

Aug 3-

Test # 2

Aug 7-

E-mail headers - Test review

Aug 8-

[Finals]

Grading


Tests: 20 % (each)
Assignments: 20 %
Presentation: 20 %
Class Participation: 20 %

E-mail address:

nelson.passos@mwsu.edu

Back to Dr. Passos Home Page