1. Home
  2. Mobile Forensics [CSG6108]

Faculty of Health, Engineering and Science

School: Computer and Security Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

  • Unit Title

    Mobile Forensics

  • Unit Code

    CSG6108

  • Year

    2015

  • Enrolment Period

    1

  • Version

    1

  • Credit Points

    20

  • Full Year Unit

     N

  • Mode of Delivery

    On Campus
    Online

Description

This unit is an introduction to many of the tools and techniques used in the forensic recovery of data from mobile devices. Evidence is often not accessible by usual access methods, so specialized software tools and techniques must be employed to recover this. This unit has a particular focus on recovery of evidence from mobile devices, portable memory storage and playback devices such as Personal Digital Assistants, Music Players, Mobile Telephones and other portable computing devices.

Prerequisite Rule

Students must pass 1 units from CSI4102, CSI5122

Equivalent Rule

Unit was previously coded CSG5109

Learning Outcomes

On completion of this unit students should be able to:

  1. Analyse a computing environment for mobile forensics including design and implementation of policy.
  2. Apply mobile forensics tools and techniques to recover evidence from various scenarios.
  3. Demonstrate an understanding of mobile forensics procedures and the reasons for their applications.
  4. Demonstrate an understanding of the current legal position for digital devices and relate this to the management issues of mobile forensics.
  5. Reflect on current mobile security and forensic issues.
  6. Reflect on special forensics issues associated with mobile devices, portable memory storage and playback devices.
  7. Research mobile device forensics.

Unit Content

  1. Current issues in mobile forensics.
  2. Encryption, decryption, cryptoanalysis techniques and uses in mobile forensics.
  3. Ethical and legal positions of mobile forensics application.
  4. Future issues and trends.
  5. Management issues and policy determination in mobile forensics.
  6. Physical, environmental and organisational considerations for deploying mobile forensics.
  7. The forensic process as it relates to mobile devices.

Additional Learning Experience Information

Lectures, workshops, case studies, and practical exercises.

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant Board of Examiners.

ON CAMPUS
TypeDescriptionValue
AssignmentAcademic paper40%
AssignmentForensic investigation40%
WorkshopLaboratory exercises20%
ONLINE
TypeDescriptionValue
AssignmentAcademic paper40%
AssignmentForensic investigation40%
WorkshopLaboratory exercises20%

Text References

  • Hoog, A. (2011). Android forensics: Investigation, analysis and mobile security for Google android. Boston, MA: Syngress.
  • Hoog, A., Strzempka, K. (2011). iPhone and iOS forensics: Investigation, analysis and mobile security for Apple iPhone, iPad and iOS devices. Boston, MA: Syngress.

Journal References

  • Journal of Information Warfare
  • Journal of Digital Evidence and Investigation
  • Digital Investigation: The International Journal of Digital Forensics & Incident
  • Computers and Security

Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Academic Misconduct

Edith Cowan University has firm rules governing academic misconduct and there are substantial penalties that can be applied to students who are found in breach of these rules. Academic misconduct includes, but is not limited to:

  • plagiarism;
  • unauthorised collaboration;
  • cheating in examinations;
  • theft of other students' work;

Additionally, any material submitted for assessment purposes must be work that has not been submitted previously, by any person, for any other unit at ECU or elsewhere.

The ECU rules and policies governing all academic activities, including misconduct, can be accessed through the ECU website.

CSG6108|1|1

Faculty of Health, Engineering and Science

School: Computer and Security Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

  • Unit Title

    Mobile Forensics

  • Unit Code

    CSG6108

  • Year

    2015

  • Enrolment Period

    2

  • Version

    1

  • Credit Points

    20

  • Full Year Unit

     N

  • Mode of Delivery

    On Campus
    Online

Description

This unit is an introduction to many of the tools and techniques used in the forensic recovery of data from mobile devices. Evidence is often not accessible by usual access methods, so specialized software tools and techniques must be employed to recover this. This unit has a particular focus on recovery of evidence from mobile devices, portable memory storage and playback devices such as Personal Digital Assistants, Music Players, Mobile Telephones and other portable computing devices.

Prerequisite Rule

Students must pass 1 units from CSI4102, CSI5122

Equivalent Rule

Unit was previously coded CSG5109

Learning Outcomes

On completion of this unit students should be able to:

  1. Analyse a computing environment for mobile forensics including design and implementation of policy.
  2. Apply mobile forensics tools and techniques to recover evidence from various scenarios.
  3. Demonstrate an understanding of mobile forensics procedures and the reasons for their applications.
  4. Demonstrate an understanding of the current legal position for digital devices and relate this to the management issues of mobile forensics.
  5. Reflect on current mobile security and forensic issues.
  6. Reflect on special forensics issues associated with mobile devices, portable memory storage and playback devices.
  7. Research mobile device forensics.

Unit Content

  1. Current issues in mobile forensics.
  2. Encryption, decryption, cryptoanalysis techniques and uses in mobile forensics.
  3. Ethical and legal positions of mobile forensics application.
  4. Future issues and trends.
  5. Management issues and policy determination in mobile forensics.
  6. Physical, environmental and organisational considerations for deploying mobile forensics.
  7. The forensic process as it relates to mobile devices.

Additional Learning Experience Information

Lectures, workshops, case studies, and practical exercises.

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant Board of Examiners.

ON CAMPUS
TypeDescriptionValue
AssignmentAcademic paper40%
AssignmentForensic investigation40%
WorkshopLaboratory exercises20%
ONLINE
TypeDescriptionValue
AssignmentAcademic paper40%
AssignmentForensic investigation40%
WorkshopLaboratory exercises20%

Text References

  • Hoog, A. (2011). Android forensics: Investigation, analysis and mobile security for Google android. Boston, MA: Syngress.
  • Hoog, A., Strzempka, K. (2011). iPhone and iOS forensics: Investigation, analysis and mobile security for Apple iPhone, iPad and iOS devices. Boston, MA: Syngress.

Journal References

  • Journal of Information Warfare
  • Journal of Digital Evidence and Investigation
  • Digital Investigation: The International Journal of Digital Forensics & Incident
  • Computers and Security

Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Academic Misconduct

Edith Cowan University has firm rules governing academic misconduct and there are substantial penalties that can be applied to students who are found in breach of these rules. Academic misconduct includes, but is not limited to:

  • plagiarism;
  • unauthorised collaboration;
  • cheating in examinations;
  • theft of other students' work;

Additionally, any material submitted for assessment purposes must be work that has not been submitted previously, by any person, for any other unit at ECU or elsewhere.

The ECU rules and policies governing all academic activities, including misconduct, can be accessed through the ECU website.

CSG6108|1|2