CS2013-final-report

Learning outcomes:
1. Describe the concept of privacy including personally private information, potential violations of privacy
due to security mechanisms, and describe how privacy protection mechanisms run in conflict with security
mechanisms. [Familiarity]
2. Describe how an attacker can infer a secret by interacting with a database. [Familiarity]
3. Explain how to set a data backup policy or password refresh policy. [Familiarity]
4. Discuss how to set a breach disclosure policy. [Familiarity]
5. Describe the consequences of data retention policies. [Familiarity]
6. Identify the risks of relying on outsourced manufacturing. [Familiarity]
7. Identify the risks and benefits of outsourcing to the cloud. [Familiarity]
IAS/Digital Forensics
[Elective]
Topics:
• Basic Principles and methodologies for digital forensics
• Design systems with forensic needs in mind
• Rules of Evidence – general concepts and differences between jurisdictions and Chain of Custody
• Search and Seizure of evidence: legal and procedural requirements
• Digital Evidence methods and standards
• Techniques and standards for Preservation of Data
• Legal and Reporting Issues including working as an expert witness
• OS/File System Forensics
• Application Forensics
• Web Forensics
• Network Forensics
• Mobile Device Forensics
• Computer/network/system attacks
• Attack detection and investigation
• Anti-forensics
Learning outcomes:
1. Describe what a digital investigation is, the sources of digital evidence, and the limitations of forensics.
[Familiarity]
2. Explain how to design software to support forensics. [Familiarity]
3. Describe the legal requirements for use of seized data. [Familiarity]
4. Describe the process of evidence seizure from the time when the requirement was identified to the
disposition of the data. [Familiarity]
5. Describe how data collection is accomplished and the proper storage of the original and forensics copy.
[Familiarity]
6. Conduct data collection on a hard drive. [Usage]
7. Describe a person’s responsibility and liability while testifying as a forensics examiner. [Familiarity]
8. Recover data based on a given search term from an imaged system. [Usage]
9. Reconstruct application history from application artifacts. [Usage]
10. Reconstruct web browsing history from web artifacts. [Usage]
11. Capture and interpret network traffic. [Usage]
12. Discuss the challenges associated with mobile device forensics. [Familiarity]
13. Inspect a system (network, computer, or application) for the presence of malware or malicious activity.
[Usage]
14. Apply forensics tools to investigate security breaches. [Usage]
15. Identify anti-forensic methods. [Familiarity]
- 110 -