Electronic Evidence 2 - Network and Internet Forensics

Course aim

To enable students to develop knowledge, understanding and skills for the recovery of admissible evidence from computers which are connected to a network and for the recovery of admissible evidence from computers which have been used to exchange data across the Internet

Course content

Network Basics, LAN, WAN, topologies, transmission methods, packets and packet sniffing, TCP/IP Structure & Services, Client Server Architecture and Resources, Hubs, Switches and Routers, Wireless devices, Backup Types, Policies and Software, Simple Networking Systems, Windows Networks, Novell Netware, Network Admin Issues, Permissions, Policies, Sharing and Access, Log Files, Exchange Server, E-mail Servers, Additional Network Devices, Seizing/Securing evidence from a network.
Internet History and Topology, Internet Services and Access, Internet Protocols and Addressing,
E-Mail and Header Interpretation, E-Mail Attachments, Usenet Newsgroups, FTP, Telnet and IRC, Internet Chat, HTTP, Peer-to-Peer, backdoors, virus and Trojan infection, Internet Research & Investigative Tools.

Textbook(s)

Nil

Prerequisite(s)

Nil

Corequisite(s)

Nil

Teaching method

Component	Duration
INTERNAL, MAWSON LAKES
Seminar (Seminar / Computer Practical - to introduce basic concepts; Projects and Assignments, to allow the students to learn from exercises and to provide feedback; Case studies to examine examples from practice.)	2 hours x 11 weeks
Workshop (Workshop/ Laboratory sessions - to enable students to reinforce the material presented and develop skills in carrying out various analyses and procedures. )	3.5 hours x 5 days
EXTERNAL, MAWSON LAKES, ONLINE
External (Online Seminar - weekly online discussions about the online materials learned during the week. Case studies to examine examples from practice.)	1 hour x 11 weeks
Workshop (Workshop/ Laboratory sessions (face to face - on campus) - to enable students to reinforce the material presented and develop skills in carrying out various analyses and procedures.)	3.5 hours x 5 days

Note: These components may or may not be scheduled in every study period. Please refer to the timetable for further details.

Assessment

Assignment 1, Assignment 2, Practical case study and report, Practical assessment

Fees

EFTSL*: 0.125
Commonwealth Supported program (Band 2)
To determine the fee for this course as part of a Commonwealth Supported program, go to:
How to determine your Commonwealth Supported course fee. (Opens new window)

Fee-paying program for domestic and international students
International students and students undertaking this course as part of a postgraduate fee paying program must refer to the relevant program home page to determine the cost for undertaking this course.

Non-award enrolment
Non-award tuition fees are set by the university. To determine the cost of this course, go to:
How to determine the relevant non award tuition fee. (Opens new window)

Not all courses are available on all of the above bases, and students must check to ensure that they are permitted to enrol in a particular course.

* Equivalent Full Time Study Load. Please note: all EFTSL values are published and calculated at ten decimal places. Values are displayed to three decimal places for ease of interpretation.