Course Description
In this course, students will adopt a hands-on, multi-tool approach to mobile forensics with a focus on android devices. Students will understand the challenges in mobile forensics, and conduct a thorough investigation of evidence from mobile devices. Students will develop skills to prepare the environment after initial investigation, and analyze, extract, preserve and apply recovery techniques of mobile forensic evidence. Students will also identify malware, and illustrate the spread and impact of malware, and how to protect and remove malware from android devices.
Learning Activities
The methods of instruction for this course lectures, seminars, demonstrations, and hands-on assignments/projects (group work may be involved).
Means of Assessment
Assessment will be in accordance with the Douglas College Evaluation Policy.
|
Assignments and Labs
|
0% - 10%
|
|
Research Project
|
10% - 30%
|
|
Midterm Exam *
|
20% - 35%
|
|
Final Exam *
|
30% - 40%
|
|
Total
|
100%
|
* Practical hands-on computer exam
In order to pass the course, students must, in addition to receiving an overall course grade of 50%, also achieve a grade of at least 50% on the combined weighted examination components (including quizzes, tests, exams).
Students may conduct research as part of their coursework in this class. Instructors for the course are responsible for ensuring that student research projects comply with College policies on ethical conduct for research involving humans, which can require obtaining Informed Consent from participants and getting the approval of the Douglas College Research Ethics Board prior to conducting the research.
Learning Outcomes
At the end of this course, a successful student will be able to:
- Discuss Mobile Forensics and its challenges.
- Conduct a proper initial investigation including preparing, seizing and packaging of evidence.
- Develop the skills to preserve, process and analyze the data stored on mobile devices using Multiple-Tool approach.
- Prepare the environment to extract and analyze data.
- Carry out processing and collection of a mobile device.
- Analyze digital data from mobile devices storage media and internal flash.
- Analyze the data within the device files and folders including SIM cards.
- Analyze and explain Android file structure.
- Demonstrate the process of setting up Android forensic and pre-data extraction techniques.
- Demonstrate data extraction techniques for Android.
- Analyze and compare data extraction techniques for Android.
- Implement and explain the data analysis and recovery techniques for Android.
- Identify how mobile malware is detected.
- Explain the spread, impact and infection of Android malware.
- Describe the protection and removal of Android malware.
- Demonstrate the usage of Reverse Engineering in digital forensics.
Textbook Materials
Course Materials to be provided by the instructor and/or approved textbooks from the department.
References:
- Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation by Lee Reiber, McGraw-Hill Education, latest edition
- Practical Mobile Forensics by Rohit Tamma, Oleg Skulkin , Heather Mahalik, Satish Bommisetty, Packt Publishing, latest edition