| Detailed information |
| Original study plan |
Master's programme Computer Science 2022W |
| Objectives |
Students understand the basic concpets of computer forensics, its technical limitations as well as the related legal issues. They know typical problems and possess knowledge regarding securing evidence as well as extracting, observing resp. reconstructing data from various sources.
|
| Subject |
Technical part:
- forensic process: how to secure and investigate evidence
- gathering evidence: imaging hard disks, collecting data from live systems
- analysis of file systems (finding resp. reconstructing deleted data, file/data carving)
- recovering web browsing activities
- analysis of traces in Windows systems
- secure destruction of data
- techniques for anonymous Internet use.
Legal part:
- Expertises (structure, analysis)
- legal rules regarding evidence incl burden of proof
- criminal law in the IT area, e.g. data destruction and computer fraud.
|
| Criteria for evaluation |
Written exam
|
| Methods |
Lecture and discussion
|
| Language |
English |
| Study material |
Slides
|
| Changing subject? |
No |
| Further information |
https://www.jku.at/en/institute-of-networks-and-security/
|
| Corresponding lecture |
INMNPVOIRCF: VO IT-Recht und Computerforensik (3 ECTS)
|
