Network Forensics
There are many diverse and divergent architectures used in establishing, maintaining, and delivering environments placing different emphasis on delivery of data and establishment and maintenance of the network delivery mechanisms. The student will develop skills and abilities in evaluating the patterns of evidence within this domain. This course examines the identification and acquisition of digital evidence, residing on network devices or in transmission between devices, from different network topologies, and protocols. This course will also examine the techniques or processes by which information can be hidden, exposed, examined, and processed in a forensics manner. The fundamental principles of forensics are applied to enterprise TCP/IP-based networks.
Prerequisites: CNIT 42000 OR 55600; plus knowledge of networking fundamentals
Semesters typically offered: Fall semester only
Contact Professor Ray Hansen for additional information
Credit Hours:
3
Department:
Computer and Information Technology