FI:J012 Digital Forensics - Informace o předmětu

J012 Digital Forensics

Rozsah

1/1/0. 2 kr. (plus ukončení). Ukončení: zk.

Vyučující

Ing. Marián Svetlík (přednášející), prof. RNDr. Tomáš Pitner, Ph.D. (zástupce)
RNDr. Petr Velan, Ph.D. (přednášející)
RNDr. Milan Čermák, Ph.D. (přednášející)
Radmila Čermáková (pomocník)

Garance

prof. RNDr. Tomáš Pitner, Ph.D.
Katedra počítačových systémů a komunikací – Fakulta informatiky

Rozvrh seminárních/paralelních skupin

J012/DigitalForensics: každý lichý čtvrtek 10:00–13:50 C525; a Pá 9. 10. 12:00–15:50 B311, Pá 20. 11. 12:00–15:50 B311, Pá 18. 12. 12:00–15:50 B311, Pá 8. 1. 12:00–15:50 B311, M. Svetlík
J012/NetworkForensics: Čt 14:00–15:50 S108, M. Čermák, P. Velan

Předpoklady

Digital Forensics (see Course objectives) – None

Network Forensics (see Course objectives) – ( PB156 Computer Networks && PV004 UNIX ) || SOUHLAS

Omezení zápisu do předmětu

Předmět je otevřen studentům libovolného oboru.
Předmět si smí zapsat nejvýše 24 stud.
Momentální stav registrace a zápisu: zapsáno: 0/24, pouze zareg.: 0/24, pouze zareg. s předností (mateřské obory): 0/24

Cíle předmětu

In the autumn 2020 semester, the course is specialized in the following areas:

Digital Forensics – The aim of the course is to provide: Basic overview of the role and position of the Digital Forensics in the area of cybersecurity as well as in criminal investigation. Basic overview of the methods and procedures used in the process of the digital evidence identification and analysis.

Network Forensics – The course teaches students to monitor network traffic using raw packet capture and network flows. Students will be able to analyze obtained data to detect malicious behavior and network attacks. They will learn how to explore unknown networks and their services and assess their vulnerabilities. (This seminar will be taught regularly each week in the Czech language.)

Výstupy z učení

Digital Forensics – At the end of the course, the students will be able: to understand the specifics of Digital Forensics methods and processes, to assess quality and competency of outsourced digital forensic services, to implement elementary procedures of digital forensic analysis independently, especially to work as a digital forensics first responders.

Network Forensics – At the end of the course, the students will be able to: capture and analyze network traffic, understand network flow monitoring and be able to deploy it on a network, analyze flow records and extract information related to events and incidents in the monitored network, understand network attacks and their detection in traffic, analyze unknown network infrastructure and gain information about potential vulnerabilities.

Osnova

• Digital Forensics – Digital Forensics in Cybersecurity; Digital Forensics in a criminal investigation; Digital traces and digital evidence, their properties Digital evidence documentation principles; Typical sources of the digital traces; Digital evidence handling; Digital evidence gathering and protection; Process of the digital forensics examination; Digital Forensics Laboratory - building and managing; Digital Forensics - certification and accreditation; Electronic Evidence in Czech and European context
• Network Forensics – Introduction to network forensics; Host-side artifacts; Packet capture and analysis; Network flow capture and analysis; Encrypted and tunneled traffic; Network attacks and anomalies; Intrusion detection systems; Firewall and application logs; Network scanning; Advanced network data analysis

Literatura

• Arnes, A., Digital Forensics, John Wiley & Sons, 2018, ISBN 9781119262381
• PORADA, Viktor. Kriminalistika : technické, forenzní a kybernetické aspekty. 2. aktualizované a rozší. Plzeň: Vydavatelství a nakladatelství Aleš Čeněk, 2019, 1205 stran. ISBN 9788073807412. info
• STRAUS, Jiří a Viktor PORADA. Teorie, metody a metodologie kriminalistiky. Plzeň: Vydavatelství a nakladatelství Aleš Čeněk, 2017, 417 stran. ISBN 9788073806668. info
• MESSIER, Ric. Network forensics. Indianapolis, IN: Wiley, 2017, xxiv, 331. ISBN 9781119328285. info

Výukové metody

Digital Forensics – Lectures, Case studies and seminars, Assignment (homework)

Network Forensics – Hands-on seminars and homework assignments

Metody hodnocení

Digital Forensics – Written exam (40p.) Seminars assignments (30p.) Home work (30p.)

Network Forensics – Homework assignments during the semester (at least 60 % of all marks). Exam: practical assignment and discussion.

Vyučovací jazyk

Angličtina

Další komentáře

Studijní materiály
Předmět je vyučován jednorázově.

Nachází se v prerekvizitách jiných předmětů

• PV279 Digital Forensics
  !J012  
• PV280 Network Forensics
  !J012 && PB156 && PV004  

• Statistika zápisu (nejnovější)
  
• Permalink: https://is.muni.cz/predmet/fi/podzim2020/J012