Menü
Positionsanzeige
Inhalt

[ 921NESECILV13 ] VL Computer Forensics and IT Law
Versionsauswahl
Workload Education level Study areas Responsible person Hours per week Coordinating university
3 ECTS M1 - Master's programme 1. year Computer Science Michael Sonntag 2 hpw Johannes Kepler University Linz
Detailed information
Original study plan Master's programme Computer Science 2025W
Learning Outcomes
Competences
Students can assess the content of forensic reports regarding the methods employed and for selected contents. They know the limitations and can roughly assess the chances for successful investigations. They can determine whether a specific IT activity might be illegal according to Austrian criminal law.
Skills Knowledge
Students know on a theoretical level how to, respectively the basics steps to:

  • Create images of hard disks/SSD (K3)
  • Analyze the content of an image (K4)
  • Collect data from live systems (K3)
  • Assess the quality and evidentiary value of gathered data (K5)
  • Assess the quality of an expertise (K5)
  • Extract browsing data from disk images (K4)
  • Extract data regarding selected activities in Windows from disk images (K4)
  • Use carving software to reconstruct files/data (K3)
Technical part:

  • Forensic process: how to secure evidence; requirements for forensic investigation procedures
  • Kinds and locations of IT evidence
  • Web browsing activity: location, extraction methods, interpretation limitations
  • Windows systems: location, extraction methods, interpretation limitations
  • Secure destruction of data
  • Carving: Methods and improvement for various file/content types

Legal part:

  • Expertises (structure, analysis)
  • Legal rules regarding evidence incl burden of proof
  • Criminal law in the IT area, e.g. data destruction and computer fraud
Criteria for evaluation Written exam
Methods Lecture and discussion
Language English (except Austrian criminal law: German)
Study material Slides
Changing subject? No
Further information The accompanying exercise is OPTIONAL; it covers selected of the topics of this lecture as practical exercises. https://www.jku.at/en/institute-of-networks-and-security/
Corresponding lecture INMNPVOIRCF: VO IT-Recht und Computerforensik (3 ECTS)
On-site course
Maximum number of participants -
Assignment procedure Direct assignment