Učni načrt predmeta

Predmet:
Digitalna forenzika II
Course:
Digital Forensics II
Študijski program in stopnja /
Study programme and level
Študijska smer /
Study field
Letnik /
Academic year
Semester /
Semester
Informacijske in komunikacijske Napredne internetne tehnologij e 1 1
Information and Communication Advanced Internet Technologies 1 1
Vrsta predmeta / Course type
Izbirni
Univerzitetna koda predmeta / University course code:
IKT3-666
Predavanja
Lectures
Seminar
Seminar
Vaje
Tutorial
Klinične vaje
work
Druge oblike
študija
Samost. delo
Individ. work
ECTS
15 15 15 105 5

*Navedena porazdelitev ur velja, če je vpisanih vsaj 15 študentov. Drugače se obseg izvedbe kontaktnih ur sorazmerno zmanjša in prenese v samostojno delo. / This distribution of hours is valid if at least 15 students are enrolled. Otherwise the contact hours are linearly reduced and transfered to individual work.

Nosilec predmeta / Course leader:
doc. dr. Tomaž Klobučar
Sodelavci / Lecturers:
Jeziki / Languages:
Predavanja / Lectures:
slovenščina, angleščina / Slovenian, English
Vaje / Tutorial:
Pogoji za vključitev v delo oz. za opravljanje študijskih obveznosti:
Prerequisites:

Zaključen študij druge stopnje s področja informacijskih ali komunikacijskih tehnologij ali zaključen študij druge stopnje na drugih področjih z znanjem osnov s področja predmeta. Potrebna so tudi osnovna znanja matematike, računalništva in informatike.

Completed second cycle studies in information or communication technologies or completed second cycle studies in other fields with knowledge of fundamentals in the field of this course. Basic knowledge of mathematics, computer science and informatics is also requested.

Vsebina:
Content (Syllabus outline):

Uvod:
definicija osnovnih pojmov, forenzična tehnologija

Digitalna forenzika:
metodologije digitalne forenzike; digitalna forenzika in operacijski sistemi, pomnilniške naprave, prenosni sistemi, aplikacije in mrežni sistemi

Napredna orodja digitalne forenzike:
mobilni forenzični sistemi; komercialna in odprtokodna orodja za analizo datotečnih sistemov, živih sistemov, mobilnih naprav, aplikacij in omrežnih sistemov; zanesljivost orodij digitalne forenzike

Izbrana poglavja iz digitalne forenzike (npr. forenzika v oblaku)

Praktični vidiki in smernice razvoja:
praktični primeri postopkov digitalne forenzike; raziskovalno-tehnološki trendi informacijskih sistemov, nova tržišča; izzivi digitalne forenzike

Introduction:
definition of basic concepts, digital forensics technology

Digital forensics:
digital evidence, digital forensics methodologies, technology and legalization interrelations; digital forensic and operating systems, storage, mobile systems, applications and networked systems

Advanced digital forensics tools:
digital forensic laboratory, mobile digital forensic systems; commercial and open source forensic tools for analyses of file, live, mobile and network systems, and applications; tools dependability.

Selected topics in digital forensics (e.g. cloud computing forensics)

Practical aspects and future trends:
practical examples of digital forensic investigations; Information systems research and technology trends, new markets; digital forensics research issues

Temeljna literatura in viri / Readings:

Izbrana poglavja iz naslednjih knjig: / Selected chapters from the following books:
- J. Kävrestad, Fundamentals of Digital Forensics, Theory, Methods, and Real-Life Applications, Springer, 2020, ISBN 978-3-030-38953-6
- S. Davidoff and J. Ham, Network Forensics: tracking hackers through cyberspace. Prentice Hall, 2012, ISBN-13: 978-0132564717
- K. J. Jones, R. Bejtlich and C. W. Rose, Real Digital Forensics: Computer Security and Incident Response. Addison Wesley, 2005, ISBN: 0321240693

Izbrani znanstveni članki s področja digitalne forenzike, objavljeni npr. v Digital Investigation, IEEE Security and Privacy, IEEE Network Security, International Journal of Digital Evidence, International Journal of Electronic Security and Digital Forensics in Journal of Digital Forensic Practice.

Cilji in kompetence:
Objectives and competences:

Namen predmeta je študentom predstaviti napredne vidike digitalne forenzike.

Študenti bi morali biti sposobni:
- Uporabiti metodologije digitalne forenzike
- Izbrati in uporabiti ustrezna orodja digitalne forenzike
- Upoštevati zahteve in probleme digitalne forenzike v specifičnih okoljih, na primer v oblaku ali mobilnih sistemih
- Nadaljevati raziskovalno-razvojno delo na področju digitalne forenzike

The main objective of this course is to present advanced issues of digital forensics.

Students should be able to:
- Apply digital forensics methodology
- Select and use appropriate digital forensics tools
- Take into account the requirements and problems of digital forensics in specific environments, e.g. in cloud computing or mobile systems
- Continue research and development work in the area of digital forensics

Predvideni študijski rezultati:
Intendeded learning outcomes:

Študenti bodo z uspešno opravljenimi obveznostmi tega predmeta pridobili:
- Poznavanje metodologij digitalne forenzike
- Poznavanje naprednih orodij digitalne forenzike
- Poznavanje zahtev in problemov digitalne forenzike v specifičnih okoljih, na primer v oblaku ali mobilnih sistemih
- Poznavanje smernic raziskav in razvoja na področju digitalne forenzike
- Sposobnost priprave znanstvenih rezultatov na področju

Students successfully completing this course will acquire:
- Apply digital forensics methodology
- Select and use appropriate digital forensics tools
- Know requirements and problems of digital forensics in specific environments, e.g. in cloud computing or mobile systems
- Know future trends of digital forensics research and development
- Ability to provide research results in the field

Metode poučevanja in učenja:
Learning and teaching methods:

Predavanja, seminar, konzultacije, individualno delo

Lectures, seminar, consultations, individual work

Načini ocenjevanja:
Delež v % / Weight in %
Assesment:
Seminarska naloga
50 %
Seminar work
Ustni ali pisni izpit
50 %
Oral or written exam
Reference nosilca / Lecturer's references:
1. B. Jerman-Blažič, T. Klobučar, "Removing the barriers in cross-border crime investigation by gathering e-evidence in an interconnected society", Information & communications technology law. 2020, vol. 29, no. 1, pp. 66-81. ISSN 1360-0834.
2. B. Jerman-Blažič, T. Klobučar, "Investigating crime in an interconnected society: will the new and updated EU judicial environment remove the barriers to justice?"," International review of law computers & technology. 2020, vol. 34, no. 1, str. 87-107.
3. T. Klobučar, "Towards SDGR-compliant cross-border education services", v: P. Zaphiris (ur.), A. Ioannou (ur.). Learning and Collaboration Technologies: LCT 2024: proceedings. Part 2. Cham: Springer Nature Switzerland, cop. 2024. Str. 170-181. Lecture notes in computer science, 14723. ISBN 978-3-031-61685-3. ISSN 1611-3349.
4. T. Klobučar, R. Kaur, D. Gabrijelčič, "Artificial Intelligence for cybersecurity: use cases and country perspective". ICITS 2024, Lecture notes in networks and systems. 2024, vol. 932, str. 117-126. DOI: 10.1007/978-3-031-54235-0_ 11.
5. R. Kaur, D. Gabrijelčič, T. Klobučar, "Artificial intelligence for cybersecurity: literature review and future research directions", Information fusion. [Online ed.]. Sep. 2023, vol. 97, [article no.] 101804, str. 1-29.