CYB 328: COMPUTER NETWORK FORENSICS AND DIGITAL INVESTIGATIONS

This course studies the technology and practice of investigating the abuse of computing systems and digital devices. As criminal and adversarial activity becomes faster and less visible over networks, students must understand how to search for, and extract information from, cyberspace. This course will provide unparalleled insight into digital forensics methods and laws, complemented with practical lab work. This course also introduces students to the theory and practice of network traffic analysis and intrusion detection. Students will learn “traceback” techniques and information retrieval methods to identify different attacks. Topics covered will include network forensics, intrusion detection and response, case studies, and issues of cyber law and ethics. Students must have basic knowledge of networking, and operating systems. Team projects and presentations are required for completion.