6th European Conference - Academic Conferences

Vincent Garramone and Daniel Likarish
Forensics Topics Totals
Network Forensics [3] [6] [11] [13] 4
Incident Response [11] [12] [15] 3
Live System Forensics [1] [3] [15] 3
Malware Detection [3] [11] [12] 3
Password Cracking [2] [5] [13] 3
Registry Analysis [3] [6] [13] 3
Hardware Identification [2] [6] 2
Tool Development [3] [11] 2
Web Browser Forensics [6] [13] 2
Baselining [3] 1
Application Analysis [6] 1
Data Reconstruction [6] 1
Forensic Planning 1
Key Loggers [3] 1
Dead System Forensics [15] 1
Packet Analysis [6] 1
Password Auditing [3] 1
RFID Forensics [6] 1
Tool Validation [11] 1
Web Services [6] 1
Evidence Collection and Handling [5] 1
Key Authors Year Country Subject
[1] Bem, D. and Huebner, E. 2008 Australia Curriculum
[2] Berghel, H. 2003 USA Definition
[3] Crowley, E. 2007 USA Curriculum (corporate)
[5] Figg, W. and Zhou, Z. 2007 USA Curriculum
[6] Francia, G. A. 2006 USA Curriculum
[11] Troell, L., Pan, Y., and Stackpole, B. 2003 USA Curriculum
[12] Troell, L., Pan, Y., and Stackpole, B. 2004 USA Curriculum
[13] Wassenaar, D., Woo, D., and Wu, P. 2009 USA Curriculum
[15] Yen, P., Yang, C., and Ahn, T. 2009 Taiwan Process
7. Appendix 2: MSIA 682, Network Forensics course topics and activities
mapped to PRISM forensics vocabulary
Course Topic Activity Description
Introduction to Security
Monitoring
Intro Security packet data
structure based on the
TCP/IP model
81
Example of a granular
Lab Activity
Identify the following
packet structures by
explaining what each
packet is, what ports,
protocols or codes
each one uses using
the static packet
captures
PRISM Forensics
vocabulary
Network forensics