CE718-7-AU-CO:
Computer Forensics

The details
2024/25
Computer Science and Electronic Engineering (School of)
Colchester Campus
Autumn
Postgraduate: Level 7
Future
Thursday 03 October 2024
Friday 13 December 2024
15
22 October 2024

 

Requisites for this module
(none)
(none)
(none)
(none)

 

(none)

Key module for

MSC G41912 Cyber Security

Module description

The module covers the fundamentals of computer forensics, including an understanding of relevant legislation and legal constraints. It addresses the requirements for evidence collection, methods for intrusion detection, response and management of intrusions, incident handling, as well as intrusion analysis, monitoring, and logging.

Module aims

The aims of this module are:



  • To provide a robust understanding of current digital forensic and watermarking technologies with an additional focus on the legal requirements for evidence gathering, clearly emphasising the abilities and limitations of the techniques.

Module learning outcomes

By the end of this module, students will be expected to be able to:



  1. Analyse the principles of digital forensics.

  2. Evaluate the legal foundations for evidence gathering.

  3. Assess the limitations of forensic techniques.

  4. Appraise the role of role of digital steganography and watermarking.

Module information

Outline Syllabus:



  • Evidence gathering rules and techniques

  • Collecting, processing, and preserving digital evidence

  • Device forensics

  • Memory forensics

  • Network forensics

  • Anti-forensic techniques

  • Forensic report writing and expert testimony

  • Digital steganography and watermarking

  • The growing role of digital steganography and watermarking in modern malware

Learning and teaching methods

This module will be delivered via:

  • Two 1-hour lectures per week (10 weeks)
  • One 2-hour laboratory per week (10 weeks)
  • Two 1-hour revision lectures in Summer Term

Inclusivity is ensured in the following ways: lecturers and other teachers are informed at the start of the term about students with special needs; student voice groups allow representatives to discuss issues surrounding learning for minorities.

Bibliography

This module does not appear to have a published bibliography for this year.

Assessment items, weightings and deadlines

Coursework / exam Description Deadline Coursework weighting
Exam  Main exam: In-Person, Open Book (Restricted), 120 minutes during Summer (Main Period) 
Exam  Reassessment Main exam: In-Person, Open Book (Restricted), 120 minutes during September (Reassessment Period) 

Exam format definitions

  • Remote, open book: Your exam will take place remotely via an online learning platform. You may refer to any physical or electronic materials during the exam.
  • In-person, open book: Your exam will take place on campus under invigilation. You may refer to any physical materials such as paper study notes or a textbook during the exam. Electronic devices may not be used in the exam.
  • In-person, open book (restricted): The exam will take place on campus under invigilation. You may refer only to specific physical materials such as a named textbook during the exam. Permitted materials will be specified by your department. Electronic devices may not be used in the exam.
  • In-person, closed book: The exam will take place on campus under invigilation. You may not refer to any physical materials or electronic devices during the exam. There may be times when a paper dictionary, for example, may be permitted in an otherwise closed book exam. Any exceptions will be specified by your department.

Your department will provide further guidance before your exams.

Overall assessment

Coursework Exam
30% 70%

Reassessment

Coursework Exam
30% 70%
Module supervisor and teaching staff

 

Availability
No
No
No

External examiner

No external examiner information available for this module.
Resources
Available via Moodle
No lecture recording information available for this module.

 

Further information

Disclaimer: The University makes every effort to ensure that this information on its Module Directory is accurate and up-to-date. Exceptionally it can be necessary to make changes, for example to programmes, modules, facilities or fees. Examples of such reasons might include a change of law or regulatory requirements, industrial action, lack of demand, departure of key personnel, change in government policy, or withdrawal/reduction of funding. Changes to modules may for example consist of variations to the content and method of delivery or assessment of modules and other services, to discontinue modules and other services and to merge or combine modules. The University will endeavour to keep such changes to a minimum, and will also keep students informed appropriately by updating our programme specifications and module directory.

The full Procedures, Rules and Regulations of the University governing how it operates are set out in the Charter, Statutes and Ordinances and in the University Regulations, Policy and Procedures.