MSc Forensic Computing and Security (incorporating PG Cert/PG Dip)
Fees |
Course length |
Entry requirements
 |
You can start this course in January or September |
Why choose this course?
- The MSc in Forensic Computing and Security is for you if you're from a computing, legal or law enforcement background and want to extend your professional interests and profile in an area that is quickly becoming crucially important to organisations.
- You'll develop a wide range of skills and competencies that will prepare you for a variety of career opportunities.
- Study a subject that is both challenging and stimulating.
- You will learn in our supportive, friendly and stimulating environment.
- There are excellent opportunities to develop your own research portfolio in this area.
- You can study full time or part time.
About the course
There is a growing need for professionals in the field of forensic computing. This can be seen by the demand from police authorities faced with sifting through huge volumes of electronically stored data on computers, mobile phones, handheld devices and many other storage media. Also, businesses need to ensure the security of their information and to be able to produce evidence trails and audit data when employees or hackers compromise or alter corporate data.
There are also a number of large public bodies, such as the NHS, who are also interested in forensic computing procedures, where the prevalence of high profile, nationally deployed information systems attracts strong public scrutiny and the need for accountability.
The MSc Forensic Computing and Security allows you to specialise in the diversity of issues concerning the security, compliance and investigation of large computer systems.
It provides an opportunity for you to acquire current and relevant specialist knowledge about the modern techniques used to investigate computer systems, and for you to be able to apply these skills to a range of diverse problems. You'll also develop the skills necessary for understanding security standards at protocol level and be able to critically analyse and evaluate responses to security related problems.
Throughout the course you'll gain a thorough understanding of the complex legal issues surrounding the use of IT and be able to develop critical responses to given legal case studies concerning its use. You'll acquire and evaluate specialist knowledge about the design and support of computer networks that allow successful evidence gathering.
You'll also examine the complex socio-ethical issues concerning the use of IT in surveillance or other threat-prevention purposes, and gain an understanding of compliance issues that contribute towards the quality and reliability of information systems.
You'll benefit from our close links with industry.
Find out more about what subjects and modules you'll be studying...
The MSc Forensic Computing and Security can be studied full time over one year, or part time over three years. It consists of three levels, the Postgraduate Certificate, Postgraduate Diploma and Masters.
At Postgraduate Certificate stage you'll learn the key skills required in forensic computer investigation and the legal background to understand information technology governance and compliance, and IT crime and misuse.
At Postgraduate Diploma stage you'll continue to deepen your understanding of security management, IT law and computer crime in the courtroom. You will also reflect on the ethical, moral and social issues connected to ubiquitous computing.
At the final Masters stage you'll undertake an Independent Scholarship with a clear emphasis on the security element of Forensic Computing. It may, for example, be protocol related or related to the process of security management but be applied in the context of forensic computing.
Certificate level
- Advanced Security Protocols
- Information Technology Crime and Misuse
- Forensic Computer Investigation
- Studying at Masters Level & Research Methods
Diploma level
- Enterprise Security Management
- Ethical Moral and Social Issues in Forensic Computing
- Computer Crime in the Courtroom
- Advanced Concepts in Secure Systems
Masters level
Modules
Stage 1
Modules you have to take (core):
 Advanced Concepts in Secure Systems What will I cover in this module?
Module description Using a blend of practical and theoretical approaches this module will empower you with the analytical tools to perform pragmatic and ethical system penetration testing. Using popular open source tools you will be given a framework to research and develop innovative methods which can be used to uncover security vulnerabilities in modern networked environments. Research will be performed in how to circumvent real world attacks using novel detection and prevention techniques. Through investigation, analysis and creative design, you will become adept in how to protect systems against internal and external threats. Learning outcomes On completion of this module you will be able to: 1. Analyse and research the efficacy of computer systems through the use of penetration testing techniques
2. Research and design custom protection techniques for identified attack types and justify their use Areas of study • Investigating social engineering and host reconnaissance
• Researching effective ways of utilising and deploying Intrusion Detection Systems (IDS)
• Explore techniques for circumventing IPS/firewalls and how to guard against these
• Analysis and synthesis of research into new techniques for indentifying Windows and Linux server vulnerabilities
• Analysing popular exploits such as buffer overflows and investigating methods of mitigating them
• Critical analysis and evaluation of models of system test plans
• Investigate the most effective ways of creating pragmatic testing plans How will I be assessed?
100% coursework
Coursework 1 - 50% - Produce a well researched report which is based on proven and theoretical principles on identifying testing strategies for detecting common and obscure system security issues within a given case study scenario.
Coursework 2 - 50% - Production of a case study focused report which identifies through experimental research the necessary actions which must be taken to harden a network system and protect it against previously identified attacks How many credits is it worth?
15 |
| Computer Crime in the Courtroom What will I cover in this module?
This module explores the body of rules regulating the means by which facts may be proved in a court of law. The obtaining of evidence by the police, the court process and roles of judge, jury and witnesses will be examined. You will study both rules relating to the admissibility of evidence, and the extent to which exceptions to exclusionary rules exist. Assessment will take the form of coursework and related provision of witness evidence in the courtroom.
On successful completion of this module you'll be able to:
- Demonstrate a critical understanding of court procedures and the roles of individuals involved, both in the obtaining of evidence and its introduction into the court process.
- Consider and ascertain the reasoning behind the rules applicable in determining evidence which can be admissible in court and analyse the effectiveness of exclusionary rules.
You'll cover:
- The role of judge and jury in relation to court procedure
- Examination in chief, cross examination and re-examination
- Police conduct in obtaining evidence and role in the justice system
- Identification evidence
- Character evidence and similar fact evidence
- The hearsay rule, res gestae and other exceptions
- Opinion evidence.
How will I be assessed?
100% Coursework How many credits is it worth?
15 |
| Enterprise Security Management What will I cover in this module?
The management of the security process is a crucial part of the successful implementation of any security process or technique. This module looks at the fundamental and core network and security management issues that affect businesses including the often conflicting organisational goals that can lead to difficult trade-offs between affordability and effective protection. On successful completion of this module you'll be able to: - Analyse and discuss core business security policy issues that ensure the delivery of good and workable security policies
- Critically evaluate and analyse the security requirements of an organisation.
You'll cover: - The role of a CISO
- Security, techniques for infrastructure protection
- Security policy formulation
- Business continuity and disaster recovery planning. Backups, cold sites,
- Access Control and Privilege Management. Biometrics
- Formal Risk Management strategies
- Personnel management, change Management, security training/awareness, administrative responsibilities
- Balancing internal and external threats and protection
- Physical security
- National critical infrastructure protection
- Network monitoring systems. User monitoring.
- Intrusion detection systems, Anomaly based detection systems, host vs network based IDS, honeypots
- Firewalls
- Malware, anti virus, spam filtering.
How much work will I need to do each week?
This module is offered in three modes of study in order to offer maximum flexibility for students on different programmes.
On Campus - Fully taught mode
Lectures / Seminars: &nb
sp; 36 hours
Directed study:
114 hours
Total: 150 hours
On-campus - Blended Learning
On-campus Seminars: &nb
sp; &nb
sp; &nb
sp; &nb
sp; 12 hours
Directed Learning via e-presentation: 138 hours
Total: 150 hours
Distance Learning
Students will receive the whole module content on line to facilitate self-learning. Students will have access to the e-tutor via the system, as well as a facility to engage other students on the module.
e-tutor contact: &nbs
p; &nbs
p; &nbs
p; &nbs
p; &nbs
p; 2.5 hours
Directed Learning via e-presentation: 147.5 hours
Total: 150 hours How will I be assessed?
100% Coursework
Coursework 1 (100%), learning outcome to be assessed: all
A detailed research task and an application of the research to a given case study. The report will be approximately 5,000 words long.
You will be given opportunities, through both formative and summative assessments, to reflect on your learning to support professional and personal development. Reading list
- Mitnick, K.D., Et Al., The Art of Deception: Controlling the Human Element of Security(2003), Hungry Minds Inc (US)
- Wallace, M., The Disaster Recovery Handbook: A Step-by-step plan to ensure business continuity and protect vital operations, facilities and assets(2004), Amacom
- Sherwood, J., Enterprise Security Architecture (2005), CMP Books
How many credits is it worth?
15 |
| Independent studies What will I cover in this module?
This module investigates core techniques used currently for the purpose of data retrieval and evidence preparation where the source of the evidence is a computer system, a network system or any other system attached thereof.
On successful completion of this module you'll be able to:
- Identify, analyse and present core data and information crucial to the investigation of a computer or network system in a format that will aid further legal investigations.
You'll cover:
- Incident management. Preparation of networks and hosts so as to be conducive to good evidence collection
- Incident response. Incident response procedures, crime scene management, recording of evidence.
- Data collection from popular operating systems such as Windows, UNIX and LINUX. Obtaining system logs and other important configuration files. Recovering deleted files and data from 'lost' space. Zeroisation
- Handling volatile data
- Forensic duplication of hard disks
- Investigation of Network interfaces.
- Remote investigation
- Anti-forensic problems such as encryption. Key escrow mechanisms.
- Computer Forensic Reports
- Tracing network activity (emails, web usage etc).
How will I be assessed?
100% Coursework How many credits is it worth?
15 |
| Information Technology Crime and Misuse What will I cover in this module?
This module examines crimes which are specific to the use of information technology, but also crimes of a general nature and other unlawful behaviour in which use, or misuse, of information technology plays a part. It aims to identify and explore the behaviour which those monitoring or examining IT for forensic or security purposes are attempting to discover. UK and EU law will be examined, but international legislation may also be relevant. On successful completion of this module you'll: - Know and understand the nature of crimes and other unlawful activity which are the subject of security and forensic activity
- Have a critical awareness of the constituent elements of such crimes and the technological means utilised in their commission.
You'll cover: - Viruses, worms, trojan horses, hacking, spamming, phishing etc and their legal implications
- Fraud involving computer technology
- Use of Computer in: Terrorism; Grooming; Rape; Murder/Suicide; Drugs; Graffiti; Government/commercial espionage; Theft; Kidnap/missing persons; Corruption; Assault; Arson; Firearms; Illegal immigration/Human Trafficking; Perverting the Course of Duty
- Computer Misuse Act
- Pornographic and other obscenity offences
- Offences of a fraudulent nature; identity theft
- Harassment offences.
How will I be assessed?
100% Coursework How many credits is it worth?
15 |
| Studying at Masters Level and Research Methods What will I cover in this module?
Module description
The module aims to develop the students' ability to study at Master's level and to develop, plan, execute a research project.
On successful completion of this module you'll be able to:
- Research, review and critically evaluate current academic literature within a specific context in order to identify the key issues and gaps within current knowledge
- Demonstrate a critical understanding of research design and methodological enquiry and to propose an appropriate research plan. Reflective evaluation of the impact of ethical values on academic research will be demonstrated
- Systematically analyse and synthesise researched data and theories.
You'll cover:
- Studying at Masters Level (Literature Review, Critical evaluation concepts and practices, Sources, Search Strategies, Communication of ideas and results)
- Research Project Development (Principles of planning projects and project lifecycles, Identifying tasks and estimating timescales, Risk analysis. Ethical, social and professional issues)
- Analysis and Synthesis of Data and Information (Experiment design, Methodologies for quantitative and qualitative investigations, System modelling concepts and constraints)
How will I be assessed?
100% Coursework Assessment will be by means of a portfolio of written work demonstrating the achievement of all learning outcomes totalling between 4000 and 5000 words. There will be a strong component of rapid, formative assessment during the delivery of that part of the module relating to learning outcome 1 which will be linked to summative assessment. Reading list
These are the books you must have your own copies of, as they provides the majority of the input for you across several of the sections:- - Cottrell S., Critical Thinking Skills; Developing Effective Analysis and Arguments, (2005), Palgrave Macmillan
- Lowes, R., Peters, H. and Turner, M., The International Student's Guide to Studying in English at University, (2004), Sage
- Oates, B., Researching Information Systems and Computing, (2006), Sage
- Walsham, G., Making a World of Difference; IT in a Global Context, (2001), Wiley. (Sections of this will be used for the exercises)
How many credits is it worth?
15 |
Modules and content may change from year to year so this list is just a guide. We will confirm the exact modules that are on offer before you start your course.
Your career
The MSc Forensic Computing and Security provides comprehensive training so that you can develop a wide range of skills and competencies that will prepare you for a variety of career opportunities, including computing, and the legal fields.
You will be learning how ot use some of the tools used in industry for the investigation of computer related hardware.
You could undertake further research leading to a PhD or in a research and development environment.
What our students say
"I'm focusing my dissertation on how electronic evidence is collected, whether the current guidelines are adequate, and what more is needed in order to prevent errors in collecting and examining electronic evidence. I've now got the fundamental technical knowledge that I can build upon through my own reading and career development."
Jamie Bottrill
How you'll learn
A series of practical and laboratory based exercises based around case studies. Hands-on experience will demonstrate core concepts in technical modules.
Case study work is based on real life scenarios.
How you're assessed
Assessment is through a range of coursework techniques including analytical essays, reports on lab based problems, assignments using case studies, and multi-task portfolios.
Anything else?
You'll spend your first week at Derby having a comprehensive introduction to the university. You'll get to know lecturers, fellow students, your way around the labs and the campus and they type of work and study you'll be doing, so you'll be fully prepared when your lectures start the following week.
As part of your induction week you'll also go on a day trip with all of the other computing students out in to the Peak District. Find out more about what this involves
There are sometimes field trips arranged within the course. Further to that the course is supported by a series of professional guest lectures through the DISC (Derbyshire Information Security Consortium)initiative. Find out more about DISC
The programme will include occasional lectures by professional bodies and the British Computing Society (BCS).
"The University of Derby is committed to design network courses rooted in industry best practice. To help facilitate this we are delighted to support the integration of our Microsoft Official Curriculum into the University's new and innovative computer network programmes."
Stephen Uden, Head of Citizenship, Programmes & Relationships - Public Sector, Microsoft Ltd.
"The school understands the computer forensics community's requirements because the specialists in the field have assisted in developing this course to ensure that it is as relevant as possible."
Simon Steggles, Managing Director of Disklabs. Find out more about Disklabs at www.disklabs.com
Tour our labs
Our computing labs are the envy of the industry. Take the video tour.
Fees*
UK/EU students
- £390 per single module (you usually take 12 of these modules in total)
International students
*These fees apply if you're starting this course between September 2010 and August 2011. We recommend you check fee details with us though, as they can change. Costs can increase each year and there may be extra costs eg for exams, trips or special modules.
Course length
- Full time : 1 year,
- Part time : 3 years
Entry requirements
You should have either: an Honours degree in Computing or a degree with substantial relevant ...
You should have either:
- an Honours degree in Computing or a degree with substantial relevant content for this specialist discipline, or an equivalent professional qualification relevant to this specialist discipline, or
- an alternative award and/or experience considered to be of an equivalent standard to one of the above, plus
- have proficiency in English (IELTS 6.0/TOEFL 550-575 [PC213-232]).
Standard entry requirements
More about staff, careers, the department...
