Course Objectives

• Practice with expertise in academics to design and implement security solutions. and analyzing the nature of attacks through cyber/computer forensics software/tools

Course Outcomes

CO1-conduct digital investigations that conform to accepted professional standards and are based on the investigative process: identification, preservation, examination, analysis, and reporting---(PO1; PO2; PO4; PO7)

CO2-cite and adhere to the highest professional and ethical standards of conduct, including impartiality and the protection of personal privacy---(PO3; PO5; PO7)

CO3-Identify and document potential security breaches of computer data that suggest violations of legal, ethical, moral, policy, and/or societal standards--(PO2; PO4)

CO4-Apply a solid foundational grounding in computer networks, operating systems, file systems, hardware, and mobile devices to digital investigations and to the protection of computer network resources from unauthorized activity---(PO3; PO5; PO7)

CO5-Work collaboratively with clients, management, and/or law enforcement to advance digital investigations or protect the security of digital resources--(PO2; PO4; PO6)

Course Syllabus

DIGITAL & CYBER FORENSICS                                               Credit: (3+2+0)

Unit I: Computer Organization & Architecture

Introduction, Central Processing Unit, Internal Communications, Machine Cycle, The Bus, Instruction set, Random Access Memory, Read only Memory, Storage System, Magnetic Storage System, Magneto Optical System, Solid-state storage devices, Storage evaluation criteria.

Input Devices: Keyboard, pointing devices, scanning devices, Optical Recognition devices, Digital Camera, Voice Recognition System, Data Acquisition Sensor, Media Input Devices, Display Monitors, Printers, Impact Printers, Non-impact Printers, Plotters, Voice Output Systems, Projectors, Terminals.

Output Devices: Media Input Devices, Display Monitors, Printers, Impact Printers, Non-impact Printers, Plotters, Voice Output Systems, Projectors, Terminals.

Unit II: Computer Codes 

Introduction, Decimal System, Binary System, Hexadecimal System, Octal System, 4-bit Binary Coded Decimal (BCD) Systems, 16-bit Unicode, Conversion of numbers.

Computer Arithmetic: Introduction, Binary Addition, Binary Multiplication, Binary Subtraction, Binary Division, Signed/Unsigned numbers, Complements of Binary Numbers, Binary Subtraction using compliments, Representing Numbers, Integer Arithmetic, Floating Point Arithmetic, Errors in Arithmetic, Laws of Arithmetic.

Computer Networking: What is computer network, Communication Protocols, The Internet, Routers, Wireless Application Protocol. Internet Technology, Electronic Commerce, Electronic Payment Systems, The Electronic or Digital Cash Virtual Private Networks (VPN).

Unit III: Introduction to Cyber Forensics

Introduction, Information technology, The Cyberspace, Traditional Crimes Go Hi-Tech, Digital forms of Conventional Crimes, Digital Crime & Cybercrime, Computer Forensic.

The Internet Crimes

Modus operandi Used for Committing Internet Crimes, Different types of Internet Crimes, Cyber Laundering, Cyber Terrorism, Cyber Warfare, Prevention of Internet Crimes.

Computer Crimes:

Classification of Computer Crimes, Computer Virus, Different types of Viruses, Computer worm, Trojan Horse, Trap Door, Super Zapping, Logic-bomb, Salami Logic, Characteristics of Computer Crimes, Characteristics of Computer Criminals, Common Targets of Computer Criminals.

Unit IV: Basics of Networking 

Basics of Networking-Types of topologies, LAN, MAN, WAN, SAN, CAN etc. Types of internet connections (Dialup, DSL, Cable, broadband, leased line, satellite, Wi-Fi, 3G-4G) ISP, IP grouping.

Network Security Measures: Basics Security Concepts, Safeguards Against the Computer Security Breaches, Secure Socket Layer Protocol.

Vulnerability of Computer Network: Objective of Network Security, Classification of Computer Attacks, Common tools of Computer Attacks, Technical Reasons for the Vulnerabilities, Vulnerability Assessment, Sources of Computer Attacks.

Unit V: Computer Networking

What is computer network, Communication Protocols, The Internet, Routers, Wireless Application Protocol. Internet Technology, Electronic Commerce, Electronic Payment Systems, The Electronic or Digital Cash Virtual Private Networks (VPN).

Digital Signatures:

Signatures in Paper-based Society, Transfer of Computer-based Documents, Authentication of Computer Based Documents, Digital Signatures.

Cryptography: Cryptography, Use of Hash Function, Digital Signature Generation, Certification of Public Keys, need for trusted Intermediary, Certification Authority, Issues in Asymmetric Cryptography, Steganography.

Unit VI: Computer Forensics 

Computer Forensics, Cardinal Rules of Computer Forensics, Characteristics of Computer Forensics Scientist, Information Storage in a Computer, Existence of evidence in Different Formulas.

Digital Analysis of Digital Evidence: Analysis Procedures, Data Validation Using MD5 Hash, Requirements for Forensic Imaging Tools, Commercial Forensic Imaging software’s, Forensic Examination of Storage Media, Status of Computer Forensics in India.

Cyber Forensic Tools and Utilities: Introduction, examining a Breadth of Products Cyber Forensic, Tools Good, Better, Best: What’s the Right Incident Response, Tool for Your Organization, Tool Review Forensic Toolkit, Encase, Mobil edit, F-RAT, FTK, Cyber check suites, etc. Specifications for Forensic Tool Tested.

Unit VII: Investigation of Computer Crimes 

The Characteristics Issues, the challenges, The Process of Investigation & Detection of Crime, Collection of Evidence from the Scene of Crime, Handling of Digital Evidence, Preserving the Digital Evidence, Examination of Digital evidence.

The Cyber Laws: Need to Regulate the Internet, Country Specific Cyber Laws, The Indian Information Technology Act-2000, Salient Features of IT Act 2000, Legal Recognition of Legal Records, Legal Recognition of Digital Signatures, and Measures to Adapt Electronic governance, Computer Virus, Inadequacies in the IT Act 2000.

National & International Coordination to handle Cyber Crimes:

Need for International Co-ordination, The Present Structure to handle Computer Crimes, The Proposed Global Approach to Handle Computer crimes. 

Practical’s: 

1. To Study Computer Hardware Components,
2. To study Internal & External ports of Computer
3. To study the Input devices of Computer, to study the Output devices of Computer.
4. To Study working of Ethernet (LAN cables), to Study the types of cables.
5. To Study Understanding LAN-client/server, user creation, password protection.
6. To study the Computer Network Security, to study Use of Hash Function.
7. To Study the use of Steganography.
8. To Study the Vulnerability of Computer Network.
9. To Study the communication Protocols layer by using cmd.
10. To detect deletions, obliterations and modifications of files using encase software.
11. To identify the IP address of the sender of e-mails.
12. To identify Encrypted files, to identify Hidden files. 

Suggested Reading:

1. Joakim Kavrestad, Basics of Digital Forensics: Theory, Methods, and Real-Life Applications, 1st Ed.2018Edition.
2. Joakim Kavrestad, Basics of Digital Forensics: Theory, Methods, and Real-Life Applications, 1st Ed.2018Edition.
3. A Practical Guide to Computer Forensics Investigation by Released December 2014 Publisher(s): Pearson IT Certification ISBN: 9780132756174

Session Plan

Session 1

SESSION1(BSC-5THSEM)

Session 2

Session 3

Session 4

Session 5

Session 6

Session 7

Session 8

Session 9

Session 10

Session 11

Session 12

Session 13

Session 14

Session 15

Session 16

Session 17

Session 18

Session 19

Cryptography: Cryptography, Use of Hash Function, Digital Signature Generation, Certification of Public Keys-

Session 19

Session 20

need for trusted Intermediary, Certification Authority, Issues in Asymmetric Cryptography, Steganography

Session 20

Session 21

Information Storage in a Computer, Existence of evidence in Different Formulas

Session 21

Session 22

Session 23

Session 24

Session 25

Session 26

Session 27

Session 28

Measures to Adapt Electronic governance, Computer Virus

Session 28

Session 29

National & International Coordination to handle Cyber Crimes:

Session 29

Session 30

Proposed Global Approach to Handle Computer crimes

Session 30

Case Studies

Case Studies