[ 921NESECILV13 ] VL Computer Forensics and IT Law

Workload Education level Study areas Responsible person Hours per week Coordinating university
3 ECTS M1 - Master's programme 1. year Computer Science Michael Sonntag 2 hpw Johannes Kepler University Linz
Detailed information
Original study plan Master's programme Computer Science 2022W
Objectives Students understand the basic concpets of computer forensics, its technical limitations as well as the related legal issues. They know typical problems and possess knowledge regarding securing evidence as well as extracting, observing resp. reconstructing data from various sources.
Subject Technical part:

  • forensic process: how to secure and investigate evidence
  • gathering evidence: imaging hard disks, collecting data from live systems
  • analysis of file systems (finding resp. reconstructing deleted data, file/data carving)
  • recovering web browsing activities
  • analysis of traces in Windows systems
  • secure destruction of data
  • techniques for anonymous Internet use.

Legal part:

  • Expertises (structure, analysis)
  • legal rules regarding evidence incl burden of proof
  • criminal law in the IT area, e.g. data destruction and computer fraud.
Criteria for evaluation Written exam
Methods Lecture and discussion
Language English
Study material Slides
Changing subject? No
Further information
Corresponding lecture INMNPVOIRCF: VO IT-Recht und Computerforensik (3 ECTS)
On-site course
Maximum number of participants -
Assignment procedure Direct assignment