Digital ForensicsHow are you doing in class so far?Overview of Course WorkFinal Exam TipsKey Papers to Read for the Final ExamFollowing Papers will be included as Extra credit questionsProjectMy Office Hours before examDigital ForensicsDr. Bhavani ThuraisinghamThe University of Texas at DallasReview for the Final ExamDecember 8, 2008How are you doing in class so far?Based on mid-term exams and the assignments everyone is doing very well in class – please see your mid-term gradePlease keep up with good work until the final gradeOverview of Course WorkTwo exams each worth 16 points-Mid-term (done) and Final exams (December 12)Programming project worth 16 points-Due date; December 12thFour homework assignments worth 10 points each-All assignments completed by December 8thTerm paper (12 points – by December 8th)Total 100 pointsExtra credit – Encase project – 10 pointsFinal Exam Tips Answer 6 out of 9 questions (maybe 7 out of 10)Network Forensics – 2 questions-Based on the lectures and the book chapterEmail, application Forensics – 1 question, based on lectures and book chapterMilitary Forensics – 1 question, lecture notesExpert witness and report writing – 1 question – based on book chapters and lecturesRest of the questions (4-5 questions) on the papers we have discussed in class-Papers will be listed in the next pageExtra credit question, from the additional papers listed in page after nextKey Papers to Read for the Final Exam Iowa State Paper-https://www.dfrws.org/2005/proceedings/wang_evidencegraphs.pdfFORZA – Digital forensics investigation framework that incorporate legal issues-http://dfrws.org/2006/proceedings/4-Ieong.pdfA cyber forensics ontology: Creating a new approach to studying cyber forensics-http://dfrws.org/2006/proceedings/5-Brinson.pdfArriving at an anti-forensics consensus: Examining how to define and control the anti-forensics problem-http://dfrws.org/2006/proceedings/6-Harris.pdfForensic feature extraction and cross-drive analysis-http://dfrws.org/2006/proceedings/10-Garfinkel.pdfA correlation method for establishing provenance of timestamps in digital evidence-http://dfrws.org/2006/proceedings/13-%20Schatz.pdfFollowing Papers will be included as Extra credit questions Cyber Forensics: a Military Perspectivehttps://www.utica.edu/academic/institutes/ecii/publications/articles/A04843F3-99E5-632B-FF420389C0633B1B.pdfHow to Reuse Knowledge about Forensic InvestigationsDanilo Bruschi, Mattia Monga, Universit`a degli Studi di Milanohttp://dfrws.org/2004/day3/D3-Martignoni_Knowledge_reuse.pdfJohn Lowry, BBN Systems: Adversary Modeling to Develop Forensic Observableshttp://dfrws.org/2004/day2/Adversary_Modeling_to_Develop_Forensic_Observables.pdf Dr. Golden G. Richard III, University of New Orleans, New Orleans, LA: Breaking the Performance Wall: The Case for Distributed Digital Forensicshttp://dfrws.org/2004/day2/Golden-Perfromance.pdfProjectProject descriptionSoftware modules (prefer diagram) and descriptionResultsAnalysisFuture improvementsReferencesMy Office Hours before examI will be at work on Tuesday and Friday if I am not called for Jury dutyTuesday afternoon (3-4pm) and Friday morning (10-11am) – December 9, 12thI will be in my office December 23rd from 11am – 12 noonYou can send me
View Full Document
Unlocking...