JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Course Objectives:

• To understand the cyberspace.
• To understand the forensics fundamentals.
• To understand the evidence capturing process.
• To understand the preservation of digital evidence.

UNIT - I

Computer Forensics Fundamentals: Introduction to Computer Forensics, Use of Computer Forensics in Law Enforcement, Computer Forensics Assistance to Human Resources/Employment Proceedings, Computer Forensics Services, Benefits of Professional Forensics Methodology, Steps Taken by Computer Forensics Specialists, Who Can Use Computer Forensic Evidence?.Types of Computer Forensics Technology : Types of Military Computer Forensic Technology, Types of Law Enforcement Computer Forensic Technology, Types of Business Computer Forensics Technology.

UNIT - II

Computer Forensics Evidence and Capture: Data Recovery: Data Recovery Defined, Data Backup and Recovery, The Role of Backup in Data Recovery, The Data-Recovery Solution, Case Histories. Evidence Collection and Data Seizure: Why Collect Evidence?, Collection Options, Obstacles, Types of Evidence, The Rules of Evidence, Volatile Evidence, General Procedure, Collecting and Archiving, Methods of Collection, Artifacts, Collection Steps, Controlling Contamination: The Chain of Custody.

UNIT - III: Duplication and Preservation of Digital Evidence

Preserving the Digital Crime Scene,

Computer Evidence Processing Steps, Legal Aspects of Collecting And Preserving Computer Forensic Evidence. Computer Image Verification and Authentication : Special Needs of Evidential Authentication, Practical Considerations, Practical Implementation.

UNIT - IV: Computer Forensics Analysis

Discovery of Electronic Evidence: Electronic Document

Discovery: A Powerful New Litigation Tool, Identification of Data: Timekeeping, Time Matters,Forensic Identification and Analysis of Technical Surveillance Devices. Reconstructing Past Events: How to Become a Digital Detective, Useable File Formats, Unusable File Formats, Converting Files. Networks: Network Forensics Scenario, A Technical Approach, Destruction of Email, Damaging Computer Evidence, International Principles Against Damaging of Computer Evidence, Tools Needed for Intrusion Response to the Destruction of Data, Incident Reporting and Contact Forms.

UNIT - V: Current Computer Forensics Tools

Evaluating Computer Forensics Tool Needs,

Computer Forensics Software Tools, Computer Forensics Hardware Tools, Validating and Testing Forensics Software.

TEXT BOOKS:

• 1. “Computer Forensics : Computer Crime Scene Investigation”, JOHN R. VACCA, Firewall Media.
• 2. “Guide to Computer Forensics and Investigations” 4e, Nelson, Phillips Enfinger, Steuart, Cengage Learning.

REFERENCES:

• 1. “Computer Forensics and Cyber Crime”, Marjie T Britz, Pearson Education.
• 2. “Computer Forensics”, David Cowen, Mc Graw Hill.
• 3. Brian Carrier , "File System Forensic Analysis" , Addison Wesley, 2005
• 4. Dan Farmer & Wietse Venema ,"Forensic Discovery", Addison Wesley, 2005
• 5. Eoghan Casey , ―Digital Evidence and Computer Crime ―, Edition 3, Academic Press, 2011
• 6. Chris Pogue, Cory Altheide, Todd Haverkos ,Unix and Linux Forensic Analysis DVD ToolKit, Syngress Inc. , 2008
• 7. Harlan Carvey ,Windows Forensic Analysis DVD Toolkit, Edition 2, Syngress Inc. , 2009
• 8. Harlan Carvey ,Windows Registry Forensics: Advanced Digital Forensic Analysis of the Windows Registry , Syngress Inc, Feb 2011
• 9. Eoghan Casey, Handbook of Digital Forensics and Investigation, Academic Press, 2009
• 10. Gonzales/ Woods/ Eddins, Digital Image Processing using MATLAB, 2nd edition, Gatesmark Publishing, ISBN 9780982085400
• 11. N.Efford, Digital Image Processing, Addison Wesley 2000, ISBN 0-201-59623-7
• 12. M Sonka, V Hlavac and R Boyle, Image Processing, Analysis and Machine Vision, PWS
• 13. 1999, ISBN 0-534-95393-
• 14. Pratt. W.K., Digital Image Processing, John Wiley and Sons, New York, 1978 M.Tech - I Year – II Semester (Cyber Forensics /Cyber Security & Information Security)