The Cyber Crime and Digital Forensics module will introduce you to the principles and practices of cyber forensics, providing a contextual setting for further modules. In particular, the module has a theoretical perspective (introducing core security concepts and principles, and covering legal, professional and ethical issues, the nature of digital crime and the role of the forensic investigator) as well as a practical technical perspective (gathering, reserving and presenting digital evidence using forensic toolkits).
On successful completion of the module, students will be able to:
This module, being part of the innovative Cyber Security and Digital Forensics course, utilises a workshop-centered teaching and learning strategy, in which practical exercises and problem-centered technical challenges are supported by short participatory lectures and group discussions. Workshops are typically structured as a three-hour lab-based session, interspersed with 3 short (20 minute) participatory lecture sessions and are designed to encourage an open, collaborative and active student learning environment.
Content delivered in workshop sessions, are based on and reinforced by recommended reading, study guides and learning resources that are available on Canvas, which duly serves as a learning, sharing, feedback and communication hub for this module. Core teaching and learning strategies for this module are described as follows:
| Definitive UNISTATS Category | Indicative Description | Hours |
|---|---|---|
| Scheduled learning and teaching | 75 x short (20-minute) participatory lectures 25 x three-hour laboratories | 100 |
| Guided independent study | Independent and directed reading. Online learning materials and study notes. | 200 |
| Total (number of credits x 10) | 300 | |
In order to help students on this module achieve their full potential, formative assessment opportunities will be provided as appropriate throughout the module. Examples of formative assessments include worked exercises which emulate aspects of the major assessment and lab work. Feedback on coursework represents an additional opportunity for formative learning and will be given in writing and/or verbally. Formative feedback will be will be provided in various forms such as during short (10 - 15 minutes) feedback sessions. The formative feedback is designed to inform student preparation for the summative assessment which may be within the same module or feed forward across the degree programme. The summative assessment is 80% coursework, which typically consists of forensic techniques coursework (eg. applied use of hash functions, hex editors, forensic tools etc.) and forensic case study coursework. Coursework will typically include demonstrable artefacts. The remaining 20% is allocated to an in-class test that takes place under examination conditions.
| Learning Outcome | Assessment Strategy |
|---|---|
| Discuss the basic methodology in computer security and interpret relating security concepts and terminology. | Examination |
| Recognise the nature and characteristics of cyber crime. | Examination |
| Describe the legal, ethical and professional role of the digital forensics examiner in investigating cyber crime. | Examination |
| Demonstrate and articulate the use of digital forensics tools and techniques. | Forensic techniques coursework. |
| Select suitable forensic tools and techniques in order to capture, analyse and preserve forensic evidence in a given scenario. | Forensic techniques coursework. |
| Description of Assessment | Definitive UNISTATS Categories | Percentage |
|---|---|---|
| Forensic techniques coursework. | Coursework | 50% |
| Forensic case study coursework. | Coursework | 30% |
| One time-limited in-class summative test | Written exam | 20% |
| Total (to equal 100%) | 100% | |
It IS NOT a requirement that any major element of assessment is passed separately in order to achieve an overall pass for the module.
Holt, T et.al. (2017). "Cybercrime and Digital Forensics: An Introduction". Routledge.
Robinson, M. (2015). "Hands-on Activities in Digital Forensics". CreateSpace Independent Publishing Platform
Bainbridge, D (2007). "Introduction to Computer Law". Longman
Nelson, B et.al. (2007). "Guide to Computer Forensics and Investigations". Course Technology.
Volonino L et al. (2006). "Computer Forensics Principles and Practices". Prentice Hall
Vacca, J.R (2005). "Computer Forensics: Computer Crime Scene Investigation". Charles River Media.
Britz, M.J (2004). "Computer Forensics and Cyber Crime: An Introduction". Pearson Prentice Hall.
Casey, E (2004). "Digital Evidence and Computer Crime". Academic Press.