CYBERCRIME DETECTION
AND FORENSICS
CIS 4385
Syllabus — Spring 2012

Times, People and Places

Instructor: Randolph Langley

    Email: langley@cs.fsu.edu
    Tel: 644-4290
    Office: 208 MCH Building

Class time and place

Tuesday, Thursday from 11:00am until 12:15pm in Room 103 Love.

Note: 202 MCH is the lab assigned for this class. You will be assigned a PC for your assignments this semester, and your FSU card will be activated so that you may access this room at your convenience. We will also at times meet in 202 MCH rather than in 103 Love during the semester. These days will be announced in advance. All exams, including the final exam, will be given 103 Love.

Office hours

Tuesday, Thursday: 10:00 - 11:00 in 208 MCH and immediately after class in 208 MCH

Wednesday, 10:30 to 11:30 in 208 MCH

Class home page

http://www.cs.fsu.edu/~langley/CIS43855-2012-1

Class Description

"Cybercrime activities leave a trail of incriminating evidence. In this course, students will focus on learning tools, techniques, and procedures for detecting cybercrime and analyzing collected data related to past and ongoing cyber offenses. The focus will be on forensic approaches that preserve the legal value of the collected evidence."

Class Prerequisites

CDA 3100, Computer Architecture I, is a prerequisite to taking this class.

CJE 4610, Crime Detection and Investigation, is a prerequisite to taking this class.

Note: Students who do not meet the prerequisites will be administratively dropped. This may not happen before the end of the drop/add period, so you may be left without a full schedule.

Objectives

This is a technical class focused on detecting cybercrime and analyzing collected data. In particular, our aims will be to study both traditional "post-mortem" analysis and emerging "live" response techniques.

Class Topics

Required Texts

Windows Forensic Analysis, 2nd Edition, by Harlan Carvey. Syngress, 2009. (This will be abbreviated as WFA in class materials.)

Malware Forensics, James Aquilina, Eoghan Casey, and Cameron Malin. Syngress, 2008. (This will be abbreviated as MF in class materials.)

Additional recommended material

File System Forensic Analysis, by Brian Carrier. Addison-Wesley, 2005. (Abbreviated FSFA in class materials.)

Digital Evidence and Computer Crime, 2nd edition, by Eoghan Casey. Academic Press, 2004. (Abbreviated DECC in class materials.)

Information Warfare and Security, by Dorothy Denning. ACM Press, 1999. (Abbreviated IWS in class materials.)

Fighting Computer Crime, by Donn Parker. Wiley Computer Publishing, 1998. (Abbreviated FCC in class materials.)

Computer Forensics: Cybercriminals, Laws, and Evidence, by Marie-Helen Maras. Jones & Bartlett, 2012. (Abbreviated CFCLE in class materials.)

Additionally, throughout the semester, I may add topical material, generally culled from recent news articles. I will add links to this material on the class home page.

Assessment

ITEM

POINTS

1st Midterm (Thursday, February 16th)

20

2nd Midterm (Thursday, March 29th)

20

Final Exam (Monday, April 23rd, from 5:30pm to 7:30pm)

30

Assignments

30

Class participation. You are expected to attend all classes and participate in this class.

20

Final Paper (due at the beginning of class on April 17th)

20

TOTAL

140


Grades

A 90% - 100%
B+ 88% - 89%
B 80% - 87%
C+ 78% - 79%
C 70% - 77%
D 60% - 69%
F 0% - 59%

Class Policies

Problem Solving Assignments

Note that 30 points of your 140 points for this class (that is, about 21% of your grade) is determined by the work done in the assignments.

Please turn in assignments on time. There will be a 50% penalty for late submissions. No late submission will be accepted after more than one week from the due date.

Assignments must be submitted on paper on the appropriate day at the beginning of class.

Attendance

Attendance at all class meetings is expected, and attendance may be taken each class session in the form of a sign-in roster. Please extend courtesy in class by arriving on time, staying until dismissed, and refraining from food and drink. You are responsible for all information explained in class, some of which will not be available in written or electronic form. I will not feel obligated to repeat announcements of future exams, assignments, schedule changes, question sets, pop quizzes, or hints on assignments. If you are forced to miss a class, it is also your responsibility to get class notes from a friend and check with me for handouts. I will use the class home page to give out assignments and general class information. You are expected to participate in the class, and this participation makes up 20 points of the 140 points of your graded activities (that is, about 14% of your final grade.)

If you are not present when attendance is checked you will be considered absent. Each unexcused recorded absence will result in a reduction of the class participation grade. Three absences will be excused without justification; after those, absences will only be excused for the reasons listed below.

Excused absences

Excused absences include illness, deaths in the immediate family and other documented crises, call to active military duty or jury duty, religious holy days, and official University activities. Accommodations for these excused absences will be made and will do so in a way that does not penalize students who have a valid excuse. Consideration will also be given to students whose dependent children experience serious illness.

Communication

You should check your electronic mail frequently for information about this course, as well as the class home page. You are also encouraged to use email to ask questions and report problems.

Academic Dishonesty

Academic dishonesty will not be tolerated. Do not turn in other people's work as your own; this includes, but is not limited to, unattributed copying from web pages, other students' work, books, journals, or broadcast media. Citations and clear delineation of cited material as distinguished from your own original work is mandatory.

The Florida State University academic honor policy is at http://dof.fsu.edu/content/download/21140/136629

Official FSU statement on the Academic Honor Policy:

	ACADEMIC HONOR POLICY:
	
	The Florida State University Academic Honor Policy outlines the
	University's expectations for the integrity of students'
	academic work, the procedures for resolving alleged violations of
	those expectations, and the rights and responsibilities of
	students and faculty members throughout the process.  Students are
	responsible for reading the Academic Honor Policy and for living
	up to their pledge to "... be honest and truthful and
	... [to] strive for personal and institutional integrity at
	Florida State University." 

University ADA statement

	ADA
	
	AMERICANS WITH DISABILITIES ACT:
	Students with disabilities needing academic accommodation should:
	
	(1) register with and provide documentation to the Student
	Disability Resource Center; and
	
	(2) bring a letter to the instructor indicating the need for
	accommodation and what type.  This should be done during the first
	week of class.
	
	This syllabus and other class materials are available in
	alternative format upon request.
	
	For more information about services available to FSU students with
	disabilities, contact the:
	
	Student Disability Resource Center
	874 Traditions Way
	108 Student Services Building
	Florida State University
	Tallahassee, FL 32306-4167
	(850) 644-9566 (voice)
	(850) 644-8504 (TDD)
	sdrc@admin.fsu.edu
	http://www.disabilitycenter.fsu.edu/
      

Please advise me at your earliest convenience (within one week) if you have a disability that will require a reasonable accommodation for the successful completion of this course. Also, as indicated above, you should register with the and provide documentation to the Student Disability Resource Center, and provide me a letter indicating the need for accommodation and indicating what type.

Summary

If you are experiencing difficulty or are concerned about your progress, please speak with me immediately.



The above schedule and procedures in this class are subject to change in the event of extenuating circumstances, university schedule changes, or calendar errors on my part.





Calendar for CIS4385 Spring 2012
Month Sunday Monday Tuesday Wednesday Thursday Friday Saturday Week # Notes
January 1 2 3 4 5 6 7 01 First week of classes. Mandatory attendance for first day of class.
January 8 9 10 11 12 13 14 02
January 15 16 17 18 19 20 21 03 January 16th is Martin Luther King Day, no classes
January 22 23 24 25 26 27 28 04
January/February 29 30 31 1 2 3 4 05
February 5 6 7 8 9 10 11 06
February 12 13 14 15 16 17 18 07 Midterm #1 will be on February 16th
February 19 20 21 22 23 24 25 08
February/March 26 27 28 29 1 2 3 09
March 4 5 6 7 8 9 10 10 Spring Break, no classes
March 11 12 13 14 15 16 17 11
March 18 19 20 21 22 23 24 12
March 25 26 27 28 29 30 31 13 Midterm #2 will be on March 29th
April 1 2 3 4 5 6 7 14
April 8 9 10 11 12 13 14 15
April 15 16 17 18 19 20 21 16 Last week of classes; final paper due on April 17th
April 22 23 24 25 26 27 28 17 Finals week: our final examination is on Monday, April 23rd from 5:30pm until 7:30pm in Room 103 LOVE.