Course Title: Computer and Internet Forensics
Part A: Course Overview
Course Title: Computer and Internet Forensics
Credit Points: 12.00
Terms
Course Code |
Campus |
Career |
School |
Learning Mode |
Teaching Period(s) |
COSC2301 |
City Campus |
Undergraduate |
140H Computer Science & Information Technology |
Face-to-Face |
Sem 2 2006, Sem 2 2007, Sem 2 2009, Sem 2 2010, Sem 2 2011, Sem 2 2012, Sem 2 2013, Sem 2 2014, Sem 2 2015 |
COSC2301 |
City Campus |
Undergraduate |
171H School of Science |
Face-to-Face |
Sem 2 2018 |
COSC2301 |
City Campus |
Undergraduate |
175H Computing Technologies |
Face-to-Face |
Sem 2 2024, Sem 2 2025 |
COSC2302 |
City Campus |
Postgraduate |
140H Computer Science & Information Technology |
Face-to-Face |
Sem 2 2006, Sem 2 2007, Sem 2 2008, Sem 2 2009, Sem 2 2010, Sem 2 2011, Sem 2 2012, Sem 2 2013, Sem 2 2014, Sem 2 2015 |
COSC2302 |
City Campus |
Postgraduate |
171H School of Science |
Face-to-Face |
Sem 2 2018 |
COSC2302 |
City Campus |
Postgraduate |
175H Computing Technologies |
Face-to-Face |
Sem 2 2024 |
COSC3079 |
RMIT University Vietnam |
Undergraduate |
175H Computing Technologies |
Face-to-Face |
Viet1 2025 |
COSC3080 |
RMIT Vietnam Hanoi Campus |
Undergraduate |
175H Computing Technologies |
Face-to-Face |
Viet1 2025 |
Course Coordinator: Mohammad Saidur Rahman
Course Coordinator Phone: +61 (449) 787067
Course Coordinator Email: mohammadsaidur.rahman@rmit.edu.au
Course Coordinator Location: City Campus
Course Coordinator Availability: by appointment
Pre-requisite Courses and Assumed Knowledge and Capabilities
Recommended Prior Study
It is recommended to have satisfactorily completed the following course/s before you commence this course:
If you have completed prior studies at RMIT or another institution that developed the skills and knowledge covered in the above course/s you may be eligible to apply for credit transfer.
Alternatively, if you have prior relevant work experience that developed the skills and knowledge covered in the above course/s you may be eligible for recognition of prior learning.
Please follow the link for further information on how to apply for credit for prior study or experience.
Course Description
Cybercrime universally causes harm to individuals, SMEs, primes, critical infrastructure systems, and governments. As we live in the Internet era, devices connected to the Internet can be exposed to cyber threats. Cyber assurance is vital for business continuity, and security of our business processes, supply chain systems, and data systems.
The role of computer and internet forensics in cybersecurity is to identify, preserve, analyse, and present digital evidence in a manner that is legally admissible. It helps in detecting and responding to cyber threats and attacks by uncovering the methods and extent of breaches, thereby aiding in the prosecution of cybercriminals. Additionally, computer and internet forensics provides critical insights that inform the development of stronger security measures, contributing to the overall protection of digital assets and systems.
This course is designed to provide a comprehensive introduction to the field of digital forensics, focusing on the investigation and analysis of digital devices and internet-based activities.
If you are enrolled in this course as a component of your Bachelor Honours Program, your overall mark will contribute to the calculation of the Weighted Average Mark (WAM).
See the WAM information web page for more information.
Objectives/Learning Outcomes/Capability Development
Program Learning Outcomes
This course contributes to the program learning outcomes for the following program(s):
BP355 - Bachelor of Cyber Security
BP356 - Bachelor of Cyber Security (Professional)
Major - Cyber Security
- BP340P23 - Bachelor of Data Science
- BP348 - Bachelor of Data Science (Professional)
- BP162O - Bachelor of Information Technology (RMITO)
- BP162P23 - Bachelor of Information Technology
- BP349 - Bachelor of Information Technology (Professional)
- BP094P23 - Bachelor of Computer Science
- BP347 - Bachelor of Computer Science (Professional)
PLO 1 Knowledge -- Apply a broad and coherent set of knowledge and skills for developing user-centric information technology solutions for contemporary societal challenges.
PLO 2 Problem Solving -- Apply systematic problem solving and decision-making methodologies to identify, design and implement information technology solutions to real world problems, demonstrating the ability to work independently to self-manage processes and projects.
PLO 3 Cognitive and Technical Skill -- Critically analyse and evaluate user requirements and design systems employing software development tools, techniques and emerging technologies.
PLO 4 Communication -- Communicate effectively with diverse audiences, employing a range of communication methods in interactions to both computing and non-computing personnel.
PLO 6 Responsibility and Accountability -- Demonstrate integrity, ethical conduct, sustainable and culturally inclusive professional standards, including First Nations knowledges and input in designing and implementing information technology solutions.
For more information on the program learning outcomes for your program, please see the program guide.
Upon successful completion of this course you should be able to:
- Apply core principles and practices of computer and internet forensics, including the methods used to investigate and analyse digital evidence.
- Identify appropriate forensic tools and techniques to recover, preserve, and examine data from various digital devices.
- Determine digital evidence to reconstruct events, identify perpetrators, and understand the context of cyber incidents.
- Evaluate the legal and ethical considerations involved in digital forensic investigations, ensuring compliance with relevant laws and regulations.
- Communicate forensic findings effectively through clear, concise, and professional reports and presentations, suitable for both technical and non-technical audiences.
Overview of Learning Activities
This course is delivered in on-campus mode but aims to provide multiple modes of delivery with course materials available electronically wherever possible. Each topic (in standard on-campus mode) consists of lectures and workshops.
The learning activities included in this course are:
- Lectorials where key concepts will be explained, course material will be presented, and the subject matter will be illustrated with demonstrations and examples.
- Workshops will focus on practical work, problem-solving, and the exploration of concepts with teaching staff and other students.
- Group discussions (including in-class and online forums) with teaching staff and other students will focus on solving problems related to lecture examples, workshop tasks, and exploration of advanced relevant concepts.
- Assignment work will require an integrated understanding of the subject matter; and private study, working through the course as presented in classes and learning materials, and gaining practice at solving conceptual and technical problems.
Overview of Learning Resources
You will make use of computer laboratories and relevant software recommended by the School. You will be able to access course information and learning materials through myRMIT and may be provided with additional materials. Lists of relevant reference texts, resources in the library and freely accessible Internet sites will be provided.
Use the RMIT Bookshop textbook list search page to find recommended textbook(s).
There are services available to support your learning through the University Library. The Library provides guides on academic referencing and subject specialist help as well as a range of study support services. These services can provide extra support to organise your studies, assignment planning or learning skills advice you may wish to contact the Study and Learning Centre. http://www.rmit.edu.au/studyandlearningcentre
For further information, please visit the Library page on the RMIT University website and the myRMIT student portal
BYOD requirement
Since this course is interactive, you will need to bring along a personal laptop to class that is powerful enough to handle the software used. See below for the minimum useful specifications:
- Recent MS Windows OS 10 or higher with native ability to virtualize with VirtualBox software (free), or MacOS with ability to virtualise.
- 8GB of RAM minimum, 16GB preferred
- USB memory stick capability
- Ability to virtual-boot off USB memory stick is desirable
- 100GB free space on hard disk for the various software and virtual instances
- Reasonably powerful CPU, else everybody will be waiting for you.
Most recent laptops will have the above characteristics
Overview of Assessment
Note: This course has no hurdle requirements.
Assessment tasks
Assessment Task 1: Industry focused Timed Assignment 1
Weighting 30%
This assessment task supports CLOs 1 - 3
Assessment Task 2: Industry focused Timed Assignment 2
Weighting 50%
This assessment task supports CLOs 3 – 5
Assessment Task 3: Lab exam
Weighting 20%
This assessment supports CLOs 1 - 5
If you have a long-term medical condition and/or disability it may be possible to negotiate to vary aspects of the learning or assessment methods. You can contact the program coordinator or Equitable Learning Services if you would like to find out more.