Home Page
CSIS 1000
CSIS 2600
CSIS 2620
CSIS 3620
CSIS 3650
CSIS 3660
CSIS 4700
MSFS 6450
Office Hours
Syllabus for MSFS 6450 - Network & Internet Forensics

TWR: 4:00pm-6:50pm ELC306 and ELC210

Text:    Davidoff, Sherri. Network Forensics, Tracking Hackers through Cyberspace, ISBN# 0-13-256471-8

Course Description: This course is designed to provide a practical guide to internet fraud which gives student the skills they need to fight back against the spammers, con artists, and identity thieves that plague the Internet. (As Needed)

Course Objectives:

  1. Demonstrate Network and Internet Forensic tools and communicate their findings to the class.
  2. Understand Internet forensics problems through complex procedures.
  3. Understand the need for internet forensics investigators to maintain the highest level of ethical behavior to be credible in court.
  4. Demonstrate current Network and Internet forensic procedures, using current forensic tools.
  5. Recognize the need to stay on top of changing technology trends.

Course Approach:

This course includes lectures based on topics found in the text. There is also a heavy lab component to this class, where students will work with cases and the tools discussed in class that enable forensic professionals to gather and preserve evidence. The text, lecture materials, and the Internet will serve as the major sources of information for this course.  Your responsibility as a the student is to read the text, attend class sessions, take thorough notes, complete assigned tasks, and complete all exams.  Questions are always encouraged, however, you should review the materials before requesting additional assistance.

Comfortable Learning Environment:

Students with medical, psychological, learning, or other disabilities desiring academic adjustments, accommodations, or auxiliary aids will need to contact the Disability Support Center, Room 205D, Sharwan Smith Center, phone (435)865-8022.  The disability Support Center determines eligibility for and authorizes the provision of these services and aids.


Assignments/Research Paper 25%
Final Project 60%
Exams & Quizzes 10%
Attendance & Participation 5%


Assignments are due at the end of the day, on the date indicated on the assignment schedule (11:55pm).  Assignments turned in for grading are expected to be of highest quality.  Proper grammar usage and correct spelling are to be used at all times.  Assignments that fail to meet these standards may, at the discretion of the instructor, be returned for reworking or be given a reduced grade for substandard performance. Assignments will consist of the following:

Case Studies:

These projects will be done on an individual basis and turned in individually. Only those listed on the schedule are to be turned in. All case studies must be typed and clearly marked as to which Case Study it is. All Case Study write-ups must answer the following questions:

  1. Why was analysis conducted?
  2. What evidence was analyzed?
  3. How was evidence integrity safeguarded?
  4. What process was used?
  5. What relevant information was found?

Final Project:

The final project will consist of creating a case of your own, as a class, that will be used for future undergraduate and graduate experience. This project will include creating the following (subject to change):

  • Outline case background information.
  • Provide case specifics relating to what should be found, what crime is supposedly perpetrated, etc.
  • Create persona's of individuals involved in the case.
  • Generate the necessary traffic and artifacts to prove what crimes have been committed within the organization.
  • Create evidence files to be used in the case.

Exams and Quizzes:

Quizzes, both announced and unannounced, can be given throughout the semester and may cover material previously discussed or to be discussed in class that day.  Students are encouraged to read and review discussion materials before class.

Attendance and Participation:

Due to the time given in class to complete Assignments, and work on the final project, it is encouraged that you attend class. Attendance will be taken and this will comprise 10% of your grade.

Late Work:

Late work will be accepted within two days of the announced due date.  Late work will receive an automatic grade reduction of 25%.  Late work turned in after the two day grace period will receive no credit.

Make-up Exams:

Make-up exams will be given for university-approved absences or absences pre-approved by the instructor.  Illness, unless the instructor is notified in advance of the exam period, is not considered justification for make-up exams.  Make-up exams, when given, will be at a time convenient to the instructor.  Final exams are to be taken at the designated time and place.  In extreme cases the final may be taken at a different time, however, the student must pay an early exam fee to the SUU Registrar's office and a copy of the receipt must be provided to the instructor before the exam is taken.

HEOA Compliance statement:

The sharing of copyrighted material through peer-to-peer (P2P) file sharing, except as provided under U.S. copyright law, is prohibited by law. Detailed information can be found at http://www.suu.edu/it/p2p-student-notice.html.


In case of emergency, the University's Emergency Notification System (ENS) will be activated. Students are encouraged to maintain updated contact information using the link on the homepage of the mySUU portal. In addition, students are encouraged to familiarize themselves with the Emergency Response Protocols posted in each classroom. Detailed information about the University's emergency management plan can be found at http://www.suu.edu/ad/facilities/emergencyprocedures.

Academic Honesty:

    Students are expected, and encouraged to work together to solve problems and further understanding about the materials covered in the course.  However, each student is expected to submit his or her own original work for grading purposes.  Failing to do so will result in serious consequences for the student(s) involved.


  Course Information
Daily Schedule
Forensic Tool Sites
SANS Reading Room
    © Copyright