Computer Science 590F - Digital Forensics

This course offers a broad introduction to the forensic investigation of digital devices. We cover the preservation, recovery, harvesting, and courtroom presentation of information from file systems, operating systems, networks, database systems applications, media files, and embedded systems. The primary goal of the class is to understand why and from where information is recoverable in these systems. We also cover relevant issues from criminology, law, and the study of privacy.

Open to MS-CMPSCI students. STUDENTS WHO HAVE TAKEN COMPSCI 365 AS AN UNDERGRADUATE ARE NOT ELIGIBLE FOR THIS COURSE. GRADUATE STUDENTS WILL BE EXPECTED TO READ SELECTED CURRENT TECHNICAL AND LAW ARTICLES AND TO IMPLEMENT AND ANALYZE STATE-OF-THE-ART SYSTEMS. PERMISSION OF INSTRUCTOR FOR UNDERGRADUATES WITH COMPSCI 220 OR 230 WITH A GRADE OF C OR BETTER, IF AVAILABLE SEATS. STUDENTS NEEDING SPECIAL PERMISSION MUST REQUEST OVERRIDES VIA THE ON-LINE FORM: https://www.cics.umass.edu/overrides.