NETWORK FORENSICS AND INVESTIGATIVE TECHNIQUES

Catalog description

This course covers topics of network and server forensics. Topics include the fundamentals of networks and server digital forensics, techniques for collecting, reconstructing and analyzing network packets, spoofing, port scanning, worms and other network vulnerabilities; identification of forensic data locations on a network; deployment of open-source network tools to collect and analyze network traffic; and development of per-incident network forensic collection plans, including the appropriate collection tools and their location on the network; data preservation and analysis. The course covers advanced topics in forensics such as cryptography, automatic intrusion detection, pattern matching and statistical techniques, and vulnerability scanning. Students will utilize case studies to test different scientific and investigative approaches. Classroom concepts will be applied in a laboratory setting where students will employ basic standard operating procedures. Laboratory required. (A special fee will be assessed.)