Course Syllabus

Course Information：

Year-Semester	Course Number	Course Name	Phase	Credits	Hours	Required/Elective	Instructor	Class	Student NO.	Withdraw	Note
Spring Semester Year 2025	345637	Digital Forensics and Investigations	1	3.0	3	★	Ching-Huang Lin	GIFM MSIS	15	0	資財所和創新資安合開

Course Plan：

Instructor	Ching-Huang Lin　Office Hours
Email	gbox@ntut.edu.tw
Last Updated	2024-12-18 16:02:45
Course Objective	資訊安全保險相關事故的理賠調查，使得數位鑑識在金融或資訊領域的重要性日益提升。數位鑑識與調查課程主要說明如何找到入侵或犯罪留下的可能的足跡，並介紹如何在合法與符合鑑識程序規範的前提下蒐集足夠的證據並保護這些有用的證據，以做為未來訴訟有效的佐證。在課程的設計上將以數位鑑識相關國際證照的領域與內容為主，除了教授學生數位鑑識的專業知識外，期能輔導學生取得數位鑑識相關證照。 The cyber security incident investigation for the cyber insurance has made digital forensics more and more important in the financial or information industry. This course focuses on identifying possible footprints of intrusions or crimes and collecting sufficient evidence and protect such useful evidence in order to be effective in future litigation. In the design of the course, the domain and content of the digital forensics international certification licenses will be mainly used. In addition to teaching the professional knowledge of digital forensics, it can also help the students obtain digital forensics certification in the future.
Course Schedule	週次/Week - 單元主題/Topic 1. Introduction Digital Forensic 2. Systems, Disks, and Media 3. Forensic Analysis 4. Acquiring Data, Duplicating Data, and Recovering Deleted Files 5. Steganography and Application Password Crackers 6. Forensic Software and Hardware 7. Windows, Linux, and Macintosh Boot Processes 8. Windows Forensic Analysis 9. UNIX Forensic Analysis 10. Macintosh Forensic Analysis 11. Embedded Systems Analysis 12. Mobile Network Investigations 13. Investigating Network Traffic and Investigating Logs 14. Router Forensics and Network Investigations 15. Investigating Wireless Attacks 16. Intrusion Investigation 17. Defeating Anti-forensics Techniques 18. Final Project
Evaluation and grading policy	Participation - 10% Exercise/Homework - 50% Lab Report - 30%
Materials	All right reserved. Do not reproduce without permission. Foreign-language textbooks:Yes Self-made teaching materials & TextBook： Handbook of Digital Forensics and Investigation, Eoghan Casey, Academic Press, Available, https://www.sciencedirect.com/book/9780123742674/handbook-of-digital-forensics-and-investigation#book-info
The access to curricular consultation	1. Office Hour: Tuesday and Wednesday 13:00-16:00 2. Discuss and ask questions through NTUT i Academy PLUS (https://istudy.ntut.edu.tw/) 3. Mail me
The course corresponds to the SDGs	SDG9：產業創新與基礎設施（Industry, Innovation and Infrastructure）
Note	1. The course handouts are published in the NTUT i Academy PLUS course. 2. If it is announced that remote classes will be taught online, the relevant course files will be recorded and uploaded in the NTUT i Academy PLUS (https://istudy.ntut.edu.tw/)