Home Page
CSIS 1000
CSIS 2600
CSIS 2620
CSIS 3620
CSIS 3650
CSIS 3660
CSIS 4700
MSFS 6450
Office Hours
Syllabus for CSIS 4700

MWF: 2:00pm-2:50pm ELC306 and ELC210

Text:    Davidoff, Sherri. Network Forensics, Tracking Hackers through Cyberspace, ISBN# 0-13-256471-8

Course Objectives:

  1. Students get involved in Internet Forensic activities and must communicate their findings to the class
  2. Some internet forensics problems require the understanding of complex procedures.
  3. An internet forensics investigator needs to maintain the highest level of ethical behavior to be credible in court.
  4. Students learn current internet forensic procedures, use current forensic tools, understand different types of cyber attacks, and learn about wireless devices.
  5. Computer crime is always evolving.  Students recognize the need to stay on top of changing technology trends.

Course Approach:

This course includes lectures based on topics found in the text. There is also a heavy lab component to this class, where students will work with cases and the tools discussed in class that enable forensic professionals to gather and preserve evidence. The text, lecture materials, and the Internet will serve as the major sources of information for this course.  Your responsibility as a the student is to read the text, attend class sessions, take thorough notes, complete assigned tasks, and complete all exams.  Questions are always encouraged, however, you should review the materials before requesting additional assistance.


There are many certifications in the industry that address forensics. This course does not necessarily prepare students for a specific certification, but exposes the students to this possibility.

Comfortable Learning Environment:

Students with medical, psychological, learning, or other disabilities desiring academic adjustments, accommodations, or auxiliary aids will need to contact the Disability Support Center, Room 205D, Sharwan Smith Center, phone (435)865-8022.  The disability Support Center determines eligibility for and authorizes the provision of these services and aids.


Assignments 50%
Exams & Quizzes 40%
Attendance & Participation 10%


Assignments are due at the end of the day, on the date indicated on the assignment schedule (11:55pm).  Assignments turned in for grading are expected to be of highest quality.  Proper grammar usage and correct spelling are to be used at all times.  Assignments that fail to meet these standards may, at the discretion of the instructor, be returned for reworking or be given a reduced grade for substandard performance. Assignments will consist of the following:

Case Studies:

These projects will be done on an individual basis and turned in individually. Only those listed on the schedule are to be turned in. All case studies must be typed and clearly marked as to which Case Study it is. All Case Study write-ups must answer the following questions:

  1. Why was analysis conducted?
  2. What evidence was analyzed?
  3. How was evidence integrity safeguarded?
  4. What process was used?
  5. What relevant information was found?


Exams and Quizzes:

Quizzes, both announced and unannounced, can be given throughout the semester and may cover material previously discussed or to be discussed in class that day.  Students are encouraged to read and review discussion materials before class.

Attendance and Participation:

Due to the time given in class to complete Assignments, it is encouraged that you attend class. Attendance will be taken and this will comprise 10% of your grade.

Late Work:

Late work will be accepted within two days of the announced due date.  Late work will receive an automatic grade reduction of 25%.  Late work turned in after the two day grace period will receive no credit.

Make-up Exams:

Make-up exams will be given for university-approved absences or absences pre-approved by the instructor.  Illness, unless the instructor is notified in advance of the exam period, is not considered justification for make-up exams.  Make-up exams, when given, will be at a time convenient to the instructor.  Final exams are to be taken at the designated time and place.  In extreme cases the final may be taken at a different time, however, the student must pay an early exam fee to the SUU Registrar's office and a copy of the receipt must be provided to the instructor before the exam is taken.

HEOA Compliance statement:

The sharing of copyrighted material through peer-to-peer (P2P) file sharing, except as provided under U.S. copyright law, is prohibited by law. Detailed information can be found at http://www.suu.edu/it/p2p-student-notice.html.


In case of emergency, the University's Emergency Notification System (ENS) will be activated. Students are encouraged to maintain updated contact information using the link on the homepage of the mySUU portal. In addition, students are encouraged to familiarize themselves with the Emergency Response Protocols posted in each classroom. Detailed information about the University's emergency management plan can be found at http://www.suu.edu/ad/facilities/emergencyprocedures.

Academic Honesty:

    Students are expected, and encouraged to work together to solve problems and further understanding about the materials covered in the course.  However, each student is expected to submit his or her own original work for grading purposes.  Failing to do so will result in serious consequences for the student(s) involved.


  Course Information
Daily Schedule
Forensic Tool Sites
SANS Reading Room
    © Copyright