數位鑑識與調查

臺北科技大學 114-2 學期課程，課號 359572。

課程大綱

資訊安全保險相關事故的理賠調查，使得數位鑑識在金融或資訊領域的重要性日益提升。數位鑑識與調查課程主要說明如何找到入侵或犯罪留下的可能的足跡，並介紹如何在合法與符合鑑識程序規範的前提下蒐集足夠的證據並保護這些有用的證據，以做為未來訴訟有效的佐證。在課程的設計上將以數位鑑識相關國際證照的領域與內容為主，除了教授學生數位鑑識的專業知識外，期能輔導學生取得數位鑑識相關證照。 The cyber security incident investigation for the cyber insurance has made digital forensics more and more important in the financial or information industry. This course focuses on identifying possible footprints of intrusions or crimes and collecting sufficient evidence and protect such useful evidence in order to be effective in future litigation. In the design of the course, the domain and content of the digital forensics international certification licenses will be mainly used. In addition to teaching the professional knowledge of digital forensics, it can also help the students obtain digital forensics certification in the future.

課程進度

週次/Week - 單元主題/Topic 1. Introduction Digital Forensic 2. Systems, Disks, and Media 3. Forensic Analysis 4. Acquiring Data, Duplicating Data, and Recovering Deleted Files 5. Steganography and Application Password Crackers 6. Forensic Software and Hardware 7. Windows, Linux, and Macintosh Boot Processes 8. Windows Forensic Analysis 9. UNIX Forensic Analysis 10. Macintosh Forensic Analysis 11. Embedded Systems Analysis 12. Mobile Network Investigations 13. Investigating Network Traffic and Investigating Logs 14. Router Forensics and Network Investigations 15. Investigating Wireless Attacks 16. Intrusion Investigation 17. Defeating Anti-forensics Techniques 18. Final Project

評量方式

Participation - 10% Exercise/Homework - 50% Lab Report - 30%

教材

【遵守智慧財產權觀念，請使用正版教科書，不得使用非法影印教科書】 使用外文原文書：是 Self-made teaching materials & TextBook： Handbook of Digital Forensics and Investigation, Eoghan Casey, Academic Press, Available, https://www.sciencedirect.com/book/9780123742674/handbook-of-digital-forensics-and-investigation#book-info