Reconstructing people's lives: A case study in teaching forensic computing
Abstract
In contrast to the USA and the UK, the academic field of forensic computing is still in ist infancy in Germany. To foster the exchange of experiences, we report on lessons learnt in teaching two graduate level courses in forensic computing at a German university. The focus of the courses was to give a research-oriented introduction into the field. The first course, a regular lecture, was accompanied by two practical exercises: (1) a live-analysis of a compromised honeypot, and (2) a dead-analysis of a set of hard disks purchased on the web. The second course was a labatory course with extensive experiments including forensic analysis of mobile phones. We give an overview over these courses and pay special attention to the reports resulting from the exercises which clearly document the ubiquity of data avilable to forensic analysis.
- Citation
- BibTeX
Freiling, F. C., Holz, T. & Mink, M.,
(2008).
Reconstructing people's lives: A case study in teaching forensic computing.
In:
Göbel, O., Frings, S., Günther, D., Nedon, J. & Schadt, D.
(Hrsg.),
IMF 2008 – IT Incident Management & IT Forensics.
Bonn:
Gesellschaft für Informatik e.V..
(S. 125-141).
@inproceedings{mci/Freiling2008,
author = {Freiling, Felix C. AND Holz, Thorsten AND Mink, Martin},
title = {Reconstructing people's lives: A case study in teaching forensic computing},
booktitle = {IMF 2008 – IT Incident Management & IT Forensics},
year = {2008},
editor = {Göbel, Oliver AND Frings, Sandra AND Günther, Detlef AND Nedon, Jens AND Schadt, Dirk} ,
pages = { 125-141 },
publisher = {Gesellschaft für Informatik e.V.},
address = {Bonn}
}
author = {Freiling, Felix C. AND Holz, Thorsten AND Mink, Martin},
title = {Reconstructing people's lives: A case study in teaching forensic computing},
booktitle = {IMF 2008 – IT Incident Management & IT Forensics},
year = {2008},
editor = {Göbel, Oliver AND Frings, Sandra AND Günther, Detlef AND Nedon, Jens AND Schadt, Dirk} ,
pages = { 125-141 },
publisher = {Gesellschaft für Informatik e.V.},
address = {Bonn}
}
Dateien | Groesse | Format | Anzeige | |
---|---|---|---|---|
gi-proc-140-010.pdf | 773.5Kb | View/ |
Haben Sie fehlerhafte Angaben entdeckt? Sagen Sie uns Bescheid: Send Feedback
More Info
ISBN: 978-3-88579-234-5
ISSN: 1617-5468
xmlui.MetaDataDisplay.field.date: 2008
Language:
(en)

Content Type: Text/Conference Paper