MSc: Cybercrime Forensics - Revision history

R.akhmetzyanov at 10:58, 29 August 2022

2022-08-29T10:58:51Z

← Older revision		Revision as of 10:58, 29 August 2022
Line 1:		Line 1:
−	= Cybercrime and Forensics =
−	* Course name: Cybercrime and Forensics
−	* Course number:
−	* Subject area:
−
−	== Short Description ==
−	Modern tactics and techniques of high-tech crimes, including counter -forensics methods, are evolving rapidly according to the past several years. Therefore, the purpose of this course is to provide for students the necessary knowledge and abilities to obtain and analyze digital evidence in a way to provide investigations that will comply with the current law and regulations. Another purpose for the course is to learn for students how to counteract with ongoing computer incidents, intrusions and to perform threat hunting in the computer systems
−
−	== Prerequisites ==
−
−	=== Prerequisite subjects ===
−
−
−	=== Prerequisite topics ===
−
−
−	== Course Topics ==
−	{\| class="wikitable"
−	\|+ Course Sections and Topics
−	\|-
−	! Section !! Topics within the section
−	\|-
−	\| Booting, Operating Systems, and Computer Architecture \|\|
−	# Booting principles and disks
−	# Essentials of operating systems
−	# Fundamentals of computer architecture
−	\|-
−	\| DNS, DNSSEC, and DoH \|\|
−	# DNS
−	# DNSSEC
−	# DoH
−	\|-
−	\| Email \|\|
−	# Email architecture
−	# Spam management
−	\|-
−	\| Directory, Web, Protocol, ABNF and Deflating \|\|
−	# Directory services
−	# Web
−	# Protocols
−	# ABNF
−	# Deflating
−	\|}
−	== Intended Learning Outcomes (ILOs) ==
−
−	=== What is the main purpose of this course? ===
−	CIA course serves as kick-start for the security and network engineering Masters program. Before diving into the depth of the topics, the students must know preliminary concepts related to computer networks services and applications therein. This course is designed to cover the basic services offered by the Internet including operating systems and computer architecture. The concepts from this course will be used throughout the course of whole masters. More precisely, this course will cover the basic computer architecture and assembly language programming, Domain Name Services (DNS), DNSSec, email, web, directories, and disks. This course will also cover protocols and ABNF. The theory part will strengthen the theoretical aspects of the concepts whereas the lab exercises will provide the students with the opportunity to have hands-on experience of the ideas they learnt in the lectures.
−
−	=== ILOs defined at three levels ===
−
−	==== Level 1: What concepts should a student know/remember/explain? ====
−	By the end of the course, the students should be able to ...
−	* Identify different Internet applications and understand their working principles from the protocols point of view
−	* Demonstrate the acquired knowledge and skills in classical internet applications including DNS, Email, and Directory services.
−	* Able to write regular expressions and context-free grammar that are essential in Internet applications and information exchange through the networks
−	* Able to partition disks and remember the booting principles as well as secure booting
−
−	==== Level 2: What basic practical skills should a student be able to perform? ====
−	By the end of the course, the students should be able to ...
−	* Demonstrate knowledge and skills to use web services
−	* Demonstrate the essential knowledge of disks and calculate particular locations/addresses in disks
−	* Reason about problems in the current DNS and the need to upgrade to DNSSEC and DNS over HTTPS
−	* Demonstrate the knowledge of email and other services configuration
−
−	==== Level 3: What complex comprehensive skills should a student be able to apply in real-life scenarios? ====
−	By the end of the course, the students should be able to ...
−	* Install, Configure, update, and manage DNS services over a network
−	* Configure, maintain, and update the secure DNS over a network
−	* Update, add, and delete records in DNS
−	* Configure a secure mail server and maintain it
−	* Get hands-on experience of the afore-mentioned technologies on their own servers.
−	== Grading ==
−
−	=== Course grading range ===
−	{\| class="wikitable"
−	\|+
−	\|-
−	! Grade !! Range !! Description of performance
−	\|-
−	\| A. Excellent \|\| 90-100 \|\| -
−	\|-
−	\| B. Good \|\| 75-89 \|\| -
−	\|-
−	\| C. Satisfactory \|\| 60-74 \|\| -
−	\|-
−	\| D. Poor \|\| 0-59 \|\| -
−	\|}
−
−	=== Course activities and grading breakdown ===
−	{\| class="wikitable"
−	\|+
−	\|-
−	! Activity Type !! Percentage of the overall course grade
−	\|-
−	\| Labs/seminar classes \|\| 20
−	\|-
−	\| Lab tasks assessment \|\| 40
−	\|-
−	\| Exams \|\| 40
−	\|}
−
−	=== Recommendations for students on how to succeed in the course ===
−
−
−	== Resources, literature and reference materials ==
−
−	=== Open access resources ===
−	* Lecture slides
−	* RFCs
−	* Link to the online material will be provided (if any)
−
−	=== Closed access resources ===
−
−
−	=== Software and tools used within the course ===
−
	= Cybercrime and Forensics =		= Cybercrime and Forensics =

R.akhmetzyanov at 09:37, 29 August 2022

2022-08-29T09:37:53Z

← Older revision		Revision as of 09:37, 29 August 2022
Line 1:		Line 1:
		+	= Cybercrime and Forensics =
		+	* Course name: Cybercrime and Forensics
		+	* Course number:
		+	* Subject area:
		+
		+	== Short Description ==
		+	Modern tactics and techniques of high-tech crimes, including counter -forensics methods, are evolving rapidly according to the past several years. Therefore, the purpose of this course is to provide for students the necessary knowledge and abilities to obtain and analyze digital evidence in a way to provide investigations that will comply with the current law and regulations. Another purpose for the course is to learn for students how to counteract with ongoing computer incidents, intrusions and to perform threat hunting in the computer systems
		+
		+	== Prerequisites ==
		+
		+	=== Prerequisite subjects ===
		+
		+
		+	=== Prerequisite topics ===
		+
		+
		+	== Course Topics ==
		+	{\| class="wikitable"
		+	\|+ Course Sections and Topics
		+	\|-
		+	! Section !! Topics within the section
		+	\|-
		+	\| Booting, Operating Systems, and Computer Architecture \|\|
		+	# Booting principles and disks
		+	# Essentials of operating systems
		+	# Fundamentals of computer architecture
		+	\|-
		+	\| DNS, DNSSEC, and DoH \|\|
		+	# DNS
		+	# DNSSEC
		+	# DoH
		+	\|-
		+	\| Email \|\|
		+	# Email architecture
		+	# Spam management
		+	\|-
		+	\| Directory, Web, Protocol, ABNF and Deflating \|\|
		+	# Directory services
		+	# Web
		+	# Protocols
		+	# ABNF
		+	# Deflating
		+	\|}
		+	== Intended Learning Outcomes (ILOs) ==
		+
		+	=== What is the main purpose of this course? ===
		+	CIA course serves as kick-start for the security and network engineering Masters program. Before diving into the depth of the topics, the students must know preliminary concepts related to computer networks services and applications therein. This course is designed to cover the basic services offered by the Internet including operating systems and computer architecture. The concepts from this course will be used throughout the course of whole masters. More precisely, this course will cover the basic computer architecture and assembly language programming, Domain Name Services (DNS), DNSSec, email, web, directories, and disks. This course will also cover protocols and ABNF. The theory part will strengthen the theoretical aspects of the concepts whereas the lab exercises will provide the students with the opportunity to have hands-on experience of the ideas they learnt in the lectures.
		+
		+	=== ILOs defined at three levels ===
		+
		+	==== Level 1: What concepts should a student know/remember/explain? ====
		+	By the end of the course, the students should be able to ...
		+	* Identify different Internet applications and understand their working principles from the protocols point of view
		+	* Demonstrate the acquired knowledge and skills in classical internet applications including DNS, Email, and Directory services.
		+	* Able to write regular expressions and context-free grammar that are essential in Internet applications and information exchange through the networks
		+	* Able to partition disks and remember the booting principles as well as secure booting
		+
		+	==== Level 2: What basic practical skills should a student be able to perform? ====
		+	By the end of the course, the students should be able to ...
		+	* Demonstrate knowledge and skills to use web services
		+	* Demonstrate the essential knowledge of disks and calculate particular locations/addresses in disks
		+	* Reason about problems in the current DNS and the need to upgrade to DNSSEC and DNS over HTTPS
		+	* Demonstrate the knowledge of email and other services configuration
		+
		+	==== Level 3: What complex comprehensive skills should a student be able to apply in real-life scenarios? ====
		+	By the end of the course, the students should be able to ...
		+	* Install, Configure, update, and manage DNS services over a network
		+	* Configure, maintain, and update the secure DNS over a network
		+	* Update, add, and delete records in DNS
		+	* Configure a secure mail server and maintain it
		+	* Get hands-on experience of the afore-mentioned technologies on their own servers.
		+	== Grading ==
		+
		+	=== Course grading range ===
		+	{\| class="wikitable"
		+	\|+
		+	\|-
		+	! Grade !! Range !! Description of performance
		+	\|-
		+	\| A. Excellent \|\| 90-100 \|\| -
		+	\|-
		+	\| B. Good \|\| 75-89 \|\| -
		+	\|-
		+	\| C. Satisfactory \|\| 60-74 \|\| -
		+	\|-
		+	\| D. Poor \|\| 0-59 \|\| -
		+	\|}
		+
		+	=== Course activities and grading breakdown ===
		+	{\| class="wikitable"
		+	\|+
		+	\|-
		+	! Activity Type !! Percentage of the overall course grade
		+	\|-
		+	\| Labs/seminar classes \|\| 20
		+	\|-
		+	\| Lab tasks assessment \|\| 40
		+	\|-
		+	\| Exams \|\| 40
		+	\|}
		+
		+	=== Recommendations for students on how to succeed in the course ===
		+
		+
		+	== Resources, literature and reference materials ==
		+
		+	=== Open access resources ===
		+	* Lecture slides
		+	* RFCs
		+	* Link to the online material will be provided (if any)
		+
		+	=== Closed access resources ===
		+
		+
		+	=== Software and tools used within the course ===
		+
	= Cybercrime and Forensics =		= Cybercrime and Forensics =

K.saltanov: /* Section 5 */

2022-07-25T11:56:38Z

Section 5

← Older revision		Revision as of 11:56, 25 July 2022
Line 401:		Line 401:
	'''Topics covered in this section:'''		'''Topics covered in this section:'''

		+	* Introduction to incident response
−	* Incident response techniques
	* Sandboxing		* Sandboxing
	* Malware analysis		* Malware analysis
		+	* SOC analysis tasks
−	* Threats hunting
		+	* Monitoring, logging and auditing of security events

	'''What forms of the evaluation were used to test students’ performance in this section?'''		'''What forms of the evaluation were used to test students’ performance in this section?'''

M.petrishchev at 08:05, 26 April 2022

2022-04-26T08:05:15Z

← Older revision		Revision as of 08:05, 26 April 2022
Line 24:		Line 24:
	== Course Objectives Based on Bloom’s Taxonomy ==		== Course Objectives Based on Bloom’s Taxonomy ==

−	=== - What should a student remember at the end of the course? ===	+	=== What should a student remember at the end of the course? ===

	By the end of the course, the students should be able to identify and define		By the end of the course, the students should be able to identify and define
Line 36:		Line 36:
	* Decryption and decoding methods for protected and hidden data, methods of counter-forensics technology.		* Decryption and decoding methods for protected and hidden data, methods of counter-forensics technology.

−	=== - What should a student be able to understand at the end of the course? ===	+	=== What should a student be able to understand at the end of the course? ===

	By the end of the course, the students should be able to describe and explain		By the end of the course, the students should be able to describe and explain
Line 48:		Line 48:
	* Malware analysis methods		* Malware analysis methods

−	=== - What should a student be able to apply at the end of the course? ===	+	=== What should a student be able to apply at the end of the course? ===

	By the end of the course, the students should be able to demonstrate		By the end of the course, the students should be able to demonstrate

R.akhmetzyanov: /* Prerequisites */

2022-04-22T13:33:04Z

Prerequisites

← Older revision		Revision as of 13:33, 22 April 2022
Line 18:		Line 18:
	== Prerequisites ==		== Prerequisites ==
	The course has been designed to be self-included as much as possible. The successful completion will depend on prerequisite courses such as:		The course has been designed to be self-included as much as possible. The successful completion will depend on prerequisite courses such as:
−	* CSE520 — Security of systems and networks	+	* [https://eduwiki.innopolis.university/index.php/MSc:_Security_of_systems_and_networks CSE520 — Security of systems and networks]
	* Essential skills		* Essential skills
	* Classical Internet Applications		* Classical Internet Applications

M.petrishchev: M.petrishchev moved page MSc:Cybercrime Forensics to MSc: Cybercrime Forensics

2022-04-15T08:39:24Z

M.petrishchev moved page MSc:Cybercrime Forensics to MSc: Cybercrime Forensics

← Older revision	Revision as of 08:39, 15 April 2022
(No difference)

M.petrishchev: /* Prerequisites */

2022-04-14T21:25:37Z

Prerequisites

← Older revision		Revision as of 21:25, 14 April 2022
Line 18:		Line 18:
	== Prerequisites ==		== Prerequisites ==
	The course has been designed to be self-included as much as possible. The successful completion will depend on prerequisite courses such as:		The course has been designed to be self-included as much as possible. The successful completion will depend on prerequisite courses such as:
−	* Security of ~~Systems~~ and ~~Networks~~	+	* CSE520 — Security of systems and networks
	* Essential skills		* Essential skills
−	* Classical Internet Applications	+	* Classical Internet Applications
−

	== Course Objectives Based on Bloom’s Taxonomy ==		== Course Objectives Based on Bloom’s Taxonomy ==

M.petrishchev at 06:47, 14 April 2022

2022-04-14T06:47:55Z

← Older revision		Revision as of 06:47, 14 April 2022
Line 15:		Line 15:

	Modern tactics and techniques of high-tech crimes, including counter -forensics methods, are evolving rapidly according to the past several years. Therefore, the purpose of this course is to provide for students the necessary knowledge and abilities to obtain and analyze digital evidence in a way to provide investigations that will comply with the current law and regulations. Another purpose for the course is to learn for students how to counteract with ongoing computer incidents, intrusions and to perform threat hunting in the computer systems		Modern tactics and techniques of high-tech crimes, including counter -forensics methods, are evolving rapidly according to the past several years. Therefore, the purpose of this course is to provide for students the necessary knowledge and abilities to obtain and analyze digital evidence in a way to provide investigations that will comply with the current law and regulations. Another purpose for the course is to learn for students how to counteract with ongoing computer incidents, intrusions and to perform threat hunting in the computer systems
		+
		+	== Prerequisites ==
		+	The course has been designed to be self-included as much as possible. The successful completion will depend on prerequisite courses such as:
		+	* Security of Systems and Networks
		+	* Essential skills
		+	* Classical Internet Applications
		+

	== Course Objectives Based on Bloom’s Taxonomy ==		== Course Objectives Based on Bloom’s Taxonomy ==

M.petrishchev: M.petrishchev moved page MSc:CybercrimeForensics.S22 to MSc:Cybercrime Forensics

2022-04-10T12:34:54Z

M.petrishchev moved page MSc:CybercrimeForensics.S22 to MSc:Cybercrime Forensics

← Older revision	Revision as of 12:34, 10 April 2022
(No difference)

I.konyukhov: I.konyukhov moved page MSc:CybercrimeForensics to MSc:CybercrimeForensics.S22

2021-11-14T17:20:51Z

I.konyukhov moved page MSc:CybercrimeForensics to MSc:CybercrimeForensics.S22

← Older revision	Revision as of 17:20, 14 November 2021
(No difference)