COMP4580 - 01 - Network Forensics

Network forensics is the intersection of network and communication principles, security, investigative processes, and the law. This course examines many different types of network protocols and technologies as the foundation of criminal or civil investigations. Critical concepts, such as forensic models, chain of custody, Daubert criteria, and verification and validation, are presented, discussed, and experienced through performing and replicating network forensics investigations. Different acquisition approaches and systems are identified and utilized. Existing and emerging research in the field of network forensics will be introduced as required readings.