SPR401 Course Outline

Course Code: SPR401
Course Name: Security Principles: Forensics
Offered Date: Winter - 2021 | Other versions
Print Outline
Course Description:
This course will give students an overview of file system forensics.  Students will learn techniques to preserve and analyze digital evidence, and to reconstruct a timeline of events relevant to an investigation.  Students will employ professional  digital forensic investigative procedures to ensure that evidence collected meets legal standards.
Credit Status: 1 credit in the IFS program.
Prerequisite: SPR300
Mode of Instruction: 4 hours interactive labs per week.
Learning Outcomes:
  •     acquire and preserve digital evidence from a suspect system using tools/techiniques that meet legal standards
  •     reconstruct a timeline using digital evidence to correlate digital events with physical events
  •     analyze digital evidence gathered to support or refute a hypothesis
  •     write a professional report summarizing the results of a digital investigation
  •     describe issues of privacy and ethics relevant to digital forensics investigations
Employability Skills:

    •  Communicate clearly, concisely and correctly in the written, spoken and visual form that fulfils the purpose and meets the needs of the audience.|
Topic Outline:

  • Introduction to Digital Forensics
    •         digital crime scene investigation
    •         evidence preservation
    •         data analysis
    •         reconstructing timelines
    •         toolkits
  • Creating a Forensic Boot Disk
  • Hardware/OS Fundamentals
    •         numbering systems
    •         data organization
    •         hard drive technology
    •         boot process
  • Hard disk Acquisition
    •         cloning drives
    •         creating images
    •         dd linux command
  • Partitions and Volumes  
  • Removable Media
  • File System Analysis
    •         FAT file systems
    •         NTFS file systems
  • OS-Specific Forensics
  • Application Forensics
  • Metadata
  • Password protected files
  • Data-hiding techniques
  • Recovering/identifying files
    •         file signatures
    •         file carving
    •         fragmented files
  • Working with browsers
Prescribed Text(s):
  • File System Forensic Analysis by Brian Carrier; ISBN 0-321-26817-2 published by Addison-Wesley
Reference Material:
  •     3-1/2” SATA hard drive and hard drive enclosure
  •     Notepad
  •     Blank CDs, DVDs
  •     USB Stick (512 MB minimum)
Promotion Policy:
To obtain a credit in this subject, a student must:
  •     Satisfactorily complete all assignments
  •     Pass the weighted average of all assessments
  •     Pass the final exam
  •     Pass the weighted average of the exam and tests


Grading Policyhttp://www.senecacollege.ca/about/policies/grading-policy.html

A+ 90%  to  100%
A 80%  to  89%
B+ 75%  to  79%
B 70%  to  74%
C+ 65%  to  69%
C 60%  to  64%
D+ 55%  to  59%
D 50%  to  54%
F 0%    to  49% (Not a Pass)
EXC Excellent
SAT Satisfactory
UNSAT Unsatisfactory

For further information, see a copy of the Academic Policy, available online (http://www.senecacollege.ca/about/policies/academics-and-student-services.html) or at Seneca's Registrar's Offices.(https://www.senecacollege.ca/registrar.html).

Labs (minimum of 5) 20%
Projects (minimum of 2) 30%
Tests (minimum of 2) 20%
Final Exam 30%
Approved By:
Mary-Lynn Manton
Cheating and Plagiarism:
Seneca upholds a learning community that values academic integrity, honesty, fairness, trust, respect, responsibility and courage. These values enhance Seneca's commitment to deliver high-quality education and teaching excellence, while supporting a positive learning environment. Ensure that you are aware of Seneca's Academic Integrity Policy which can be found at: http://www.senecacollege.ca/about/policies/academic-integrity-policy.html Review section 2 of the policy for details regarding approaches to supporting integrity. Section 2.3 and Appendix B of the policy describe various sanctions that can be applied, if there is suspected academic misconduct (e.g., contract cheating, cheating, falsification, impersonation or plagiarism).

Please visit the Academic Integrity website http://open2.senecac.on.ca/sites/academic-integrity/for-students to understand and learn more about how to prepare and submit work so that it supports academic integrity, and to avoid academic misconduct.
Discrimination and Harassment:
All students and employees have the right to study and work in an environment that is free from discrimination and/or harassment. Language or activities that defeat this objective violate the College Policy on Discrimination/Harassment and shall not be tolerated. Information and assistance are available from the Student Conduct Office at student.conduct@senecacollege.ca.
Accomodation for Students with Disabilities
The College will provide reasonable accommodation to students with disabilities in order to promote academic success. If you require accommodation, contact the Counselling and Accessibility Services Office at ext. 22900 to initiate the process for documenting, assessing and implementing your individual accommodation needs.