APPLIED DIGITAL FORENSICS

SHE Level 4
SCQF Credit Points 20.00
ECTS Credit Points 10.00
Module Code MHI125245
Module Leader Omair Uthmani
School School of Computing, Engineering and Built Environment
Subject Cyber Security and Networks
Trimester
  • B (January start)

Pre-Requisite Knowledge

Ethical Hacking or equivalent Digital Forensics Investigation or equivalent

Summary of Content

The security/forensics landscape continues to evolve. With the increasing prevalence of mobile devices, there is a demand for the skills required to identify the vulnerabilities and recovery potential sources of evidence. This module develops a more advanced level of analysis of digital forensics, focusing specifically on mobile devices. This module strengthens a student's knowledge and deepens understanding and reasoning by introducing them to alternative environments (mobile devices). From an analysis perspective, this module examines the future of digital crime and the forensic response to these threats, together with evolving techniques. Aspects of pertinent ethical and professional issues/requirements of the Digital Forensics practitioner are incorporated throughout the syllabus. The percentage of Work Based Learning for this module, as represented by the proportion of the Activity Types which take place off campus, is 78%. The percentage of Work Based Assessment for this module is 40%.

Syllabus

Emerging Digital Technologies - A review of digital technology from a forensic perspective; forensic handling of digital devices and new technologies (i.e., mobile devices and tablets); core forensic methodology as it relates to mobile devices when conducting a manual triage inspection; logical forensic examination, and in-depth forensic analysis of physical memory; overview of memory, data storage and manipulation; dealing with password protection, encryption and removable media. Advanced Data Analysis Methodologies - Conduct analysis of acquired data, live data, log files, database structures and source code; utilise a variety of tools to extract relevant data quickly and effectively from complex technical sources. Mobile Security, Malware & Penetration Testing - Evaluation of mobile device technologies focusing on their potential security flaws. Review the possible threats affecting mobile devices and identify how attacks are performed through these systems. Assessment of mobiles security through penetration testing. Investigate the effect of malware targeted at mobile Operating Systems. Legal & Ethical Issues - Reinforce understanding and application of law, legal and ethical issues related to forensic science.

Learning Outcomes

On successful completion of this module a student should be able to:1. Demonstrate a critical understanding of the technical concepts, implementations and restrictions of mobile devices.2. Demonstrate detailed knowledge and understanding of advanced digital forensic examination and analysis techniques of mobile devices through the use of appropriate tools whilst preserving evidential integrity.3. Consider ethical issues involved and critically evaluate professional requirements of a security and forensic practitioner.

Teaching / Learning Strategy

Work Based Education aims to maximise the direct and digitally mediated contact time with students by practicing teaching and learning strategies that use authentic work based scenarios and encourage action learning, enquiry based learning, problem based learning and peer learning. All these approaches aim to directly involve the students in the process of learning and to encourage sharing of learning between students. The module team will determine the level and accuracy of knowledge acquisition at key points in the delivery, inputting when necessary either directly or with the support of external experts who will add to the authenticity, the credibility and application of the education and learning in the workplace. The Learning and Teaching Strategy is informed by the University's Strategy for Learning. The course material will be introduced through online presentations as well as guided reading material made available on GCULearn. These are supported by practical exercises, and there will be seminars on campus which will allow students to discuss key concepts and issues with peers and tutors. Students will be expected to undertake a significant level of independent study within the workplace, including practical activities, and links will be provided to appropriate external material such as articles, podcasts and videos to supplement the module content. Students will be encouraged to reflect upon the theoretical learning within the workplace and the application of newly learned concepts to the work environment, and this will form part of the module assessment. Students will receive feedback on their performance throughout the module through undertaking the practical assignments and tutorial exercises and participating in the seminars.

Indicative Reading

Casey (2011) Digital Evidence and Computer Crime, Third Edition, ACADEMIC PRESS (0123742684) Androulidakis (2012) Mobile Phone Security and Forensics, SPRINGER (9781461416494) Morrissey (2010) iOS Forensic Analysis for iPhone, iPad & iPod Touch, APRESS (1430233427) Hogg & Strzempka (2011) iPhone and iOS Forensics, SYNGRESS (1597496596) Hogg (2011) Android Forensics, SYNGRESS (9781597496513) In addition to the references above, several online resources (blogs, journals, websites, etc.), which reflect up to date understanding in the field, will be provided to students.

Transferrable Skills

Logical thinking and problem solving. Critical analysis. Communication skills (electronic, written, oral and listening) necessary to make effective presentation of a technical nature (information, ideas, problems and their solutions) to a range of audiences. Creativity, innovation and independent thinking. Reliability, integrity, honesty and ethical awareness Entrepreneurial, independence and risk taking Ability to prioritise tasks and time management (organising and planning work). Interpersonal skills, the ability to work as a member of a team (work with and relate effectively to others) recognising the different roles within a team and different ways of organising teams (leadership). -709

Module Structure

Activity Total Hours
Assessment (FT) 20.00
Seminars (FT) 24.00
Practicals (FT) 24.00
Lectures (FT) 24.00
Independent Learning (FT) 108.00

Assessment Methods

Component Duration Weighting Threshold Description
Coursework 1 2.00 40.00 35% Practical based assignment
Exam (Exams Office) 2.00 60.00 35% Unseen written exam