Overview

DRAFT: Everything on this course’s web site is currently a draft, and subject to revision before the start of the semester.

Welcome: In this course, each voice in the classroom has something of value to contribute. Please take care to respect the different experiences, beliefs and values expressed by students and staff involved in this course. My colleagues and I support UMass’s commitment to diversity, and welcome individuals regardless of age, background, citizenship, disability, sex, education, ethnicity, family status, gender, gender identity, geographical origin, language, military experience, political views, race, religion, sexual orientation, socioeconomic status, and work experience.

Course description: This course introduces students to the principal activities and state-of-the-art techniques involved in developing digital forensics systems. Topics covered may include: advanced file carving and reconstruction, forensic analysis of modern filesystems, network forensics, mobile device forensics, memory forensics, and anti-forensics.

Who is this course for? Undergraduates COMPSCI majors with a background in digital forensics (COMPSCI 365) or a strong systems background (COMPSCI 377). This course counts as a COMPSCI elective toward the major (B.S. or B.A.). Graduate students with a similar background.

Which section should you enroll in? 590F has four separate sections listed in SPIRE! Choose one as follows:

• Are you an undergraduate? Choose University section 01 (12942).
• Are you a graduate student with an assistantship or scholarship that covers your tuition and fees? Choose University section 02 (22209). You’ll need to request an override to add this section.
• Are you a graduate student without an assistantship? Choose either CPE section; the online-only CPE section 01 (21845) will watch recorded lectures but otherwise be identical to the in-person CPE section 02 (22022).