Digital Forensic Investigation

강좌 소개(Course Description)

본 강좌는 컴퓨터 기초 컴퓨터 보안 및 디지털 법 의학 조사 과정에 대한 소개를 제공합니다. 컴퓨터 기초 개념을 배우는 후에, 컴퓨터 시스템과 모바일 장치에서의 디지털 법 의학 수사하는데 중점을 둘 것입니다. 또한 디지털 증거의 다른 가능성 있는 근원을 논의할 것입니다.
(This course gives an introduction into computer basics, computer security and digital forensic investigation. After learning basic computer concepts, we will focus on conducting digital forensic investigations in computer systems and mobile devices. We will also discuss other potential sources of digital evidence.)

학습 요구 사항(Learning requirements)

-학습 권장 대상: 대학교 재학생 이상
(Learning the recommended target : University students or more.)
-사전 학습 수준: 대학 초급 수준의 컴퓨터, 네트워크 기초
(Course level: Basic knowledge of Computer and Networks)

강좌계획(Syllabus)

강좌 계획표를 확인해 보세요.(Please refer to Syllabus) -> Syllabus View

차시(Week)	목차 (Major Topic)	세부목차 (Details)	학습 활동 (Learning Activity)
1	Introduction	1. Introduction to the course
		2. Cybercrime and Networks	Quiz
		3. Cyber Security and Cybercrime	Quiz
2	Security	1. Cyber Security	Quiz
		2. How hackers hack
		3. How to secure a Windows computer
		4. How to secure a Linux computer
3	Computer Basics	1. Intro to computer	Quiz
		2. Introduction to network analysis
		3. Password attacks practice	Assignment
4	Cybercrime Investigation	1. Basics of Cybercrime Investigation	Quiz
		2. Investigation Methods	Quiz
		3. Electronic Evidence	Quiz
		4. Documentation and reporting	Quiz
5	Digital Forensic Science	1. Forensic investigation Definition	Quiz
		2. Scientific Method	Quiz
		3. Procedure	Quiz
6	Forensic Acquisition of Data	1. Data Storage	Quiz
		2. Data Structures	Quiz
		3. Acquire	Quiz
		4. Hardware Write Blockers
		5. Forensic Acquisition in Windows using FTK Imager
		6. Forensic Acquisition in Linux
		7. Forensic Acquisition in Linux Command Line
7	Data Recovery	1. Date Recovery Overview	Quiz
		2. Data Recovery with Photorec
		3. Data Recovery using tsk_recover
		4. Data Recovery using The Sleuth Kit
8	Relating Data to the Case	1. Location and Meaning of Data	Quiz
		2. Starting a case in Autopsy4
		3. Processing and Analysis of Disk Image with Autopsy 4 default modules
		4. How to use hfind from the command line
		5. How to add a hash database to Autopsy 4
9	Cyber Attack Techniques	1. Hacking	Quiz
		2. Malware	Quiz
		3. Social Engineering	Quiz
10	Random Access Memory Acquisition and Analysis	1. RAM Acquisition and Analysis	Quiz
		2. Forensic Memory Acquisition in Windows - FTK Imager
		3. Forensic Memory Acquisition in Linux - LiME
		4. Digital Forensic Memory Analysis - strings, grep and photorec
		5. Digital Forensic Memory Analysis - Volatility
11	Mobile Device Investigation	1. Mobile Device Investigations	Quiz
11	Mobile Device Investigation	2. Mobile device acquisition
12	International Cooperation in Cybercrime	1. International Nature of Cybercrime	Quiz
12	International Cooperation in Cybercrime	2. Current State of International Cooperation	Quiz
13	Cybercrime and Digital Forensics Researcha	1. Research and the Future of Cybercrime Investigation	Quiz
13	Cybercrime and Digital Forensics Researcha	2. Keeping up to date with Digital Forensics
14	Final Exam	Final Exam

담당교수(Professor)

조슈아 제임스 교수(Professor Joshua I. James)

한림대학교 글로벌학부 교수
(Department: School of Global Studies / Hallym University)

교재 정보(Book)

별도 교재는 없으며, 제공되는 PDF 파일만으로 강좌를 진행합니다.
(There are no extra materials, PDF files are provided as courses progress.)

이수 기준(Certificate)

퀴즈: 25%, 과제: 25%, 시험: 50% 를 반영하여 최종 결과 70점 이상이면 이수증 발급
(Quiz: 25%, Assignment: 25%, Final Exam: 50%, Final Score 70 point or more to issue Certificate)

강좌소개 영상(Content of Course Introduction)

조교(TA)

학습지원: 조하늘(Learning Support: Haneul Cho)

한림대학교 글로벌학부(School of Global Studies / Hallym University)

E-mail: kongecat@gmail.com

HallymK: ACE_HLM01 Digital Forensic Investigation