Graduate Studies Reports Access

Graduate Course Proposal Form Submission Detail - CJE6625
Tracking Number - 4814

Edit function not enabled for this course.

Current Status: Approved by SCNS - 2014-04-30
Campus: Tampa
Submission Type: New
Course Change Information (for course changes only):
Comments: required for Cybercrime Cert. To GC. Apprd 12/10/13; To USF Sys 2/4/14, to SCNS 2/12/14; Approved effective 4/1/14

Detail Information

  1. Date & Time Submitted: 2013-09-11
  2. Department: Criminology
  3. College: BC
  4. Budget Account Number: 122100000
  5. Contact Person: LeGrande Gardner
  6. Phone: 8636677822
  7. Email:
  8. Prefix: CJE
  9. Number: 6625
  10. Full Title: Network Forensic Criminal Investigations
  11. Credit Hours: 3
  12. Section Type: C - Class Lecture (Primarily)
  13. Is the course title variable?: N
  14. Is a permit required for registration?: N
  15. Are the credit hours variable?: N
  16. Is this course repeatable?: N
  17. If repeatable, how many times?: 0
  18. Abbreviated Title (30 characters maximum):
  19. Course Online?: O - Online (100% online)
  20. Percentage Online: 0
  21. Grading Option: R - Regular
  22. Prerequisites: none
  23. Corequisites: none
  24. Course Description: As applied to criminal investigations, this course focuses on forensic security issues involving access to data stored on networked computer systems and the transmission of data between systems.

  25. Please briefly explain why it is necessary and/or desirable to add this course: Needed for new program/concentration/certificate
  26. What is the need or demand for this course? (Indicate if this course is part of a required sequence in the major.) What other programs would this course service? This course will become an integral part of the Cybersecurity Certificate program and is one of five courses in the sequence.
  27. Has this course been offered as Selected Topics/Experimental Topics course? If yes, how many times? No
  28. What qualifications for training and/or experience are necessary to teach this course? (List minimum qualifications for the instructor.) MA with either 18 hrs in discipline or equivalent expertise in area of study.
  29. Objectives: Upon the successful completion of this course, the student will have an

    understanding of the digital evidence artifacts as they relate to computer networks.

    Upon successful completion of this course of study, students will have knowledge of

    and be able to discuss in a knowledgeable manner:

    • Major categories of digital evidence and key terminology associated with the

    study of computer networks.

    • Techniques and tools used for preservation and acquisition of digital evidence

    on computer networks.

    • Investigative strategies from the initial planning stages through the

    presentation of evidence in court.

    • Investigations of wireless networks.

    • Incorporating forensics into incident response planning

    • Incorporating forensics into investigations of network intrusions.

    • Examinations of Windows-based networks

  30. Learning Outcomes: At the end of this course, students will be able to:

    1. Apply digital evidence concepts to the investigations of networks and crimes

    on the Internet.

    2. Describe categories of digital evidence found on computer networks and

    identify specific types within each category.

    3. Identify and explain components of Windows-based and digital artifacts of

    evidential value located on such networks.

    4. Develop investigative strategies for computer networks leading to the

    successful identification, preservation, and collection of digital evidence.

    5. Analyze live and logged events on a computer network for purposes of

    identifying digital evidence.

  31. Major Topics: Topics include detecting and monitoring intrusions of networks and systems, authentication protocols, malware, and intrusion response strategies. The course introduces the concepts and issues related to securing information systems by emphasizing the fundamental concepts, architectures related to network security, network security policy, risk assessment and management, and protocols for secure network infrastructures.
  32. Textbooks: Davidoff, S. and J. Ham (2012). Network Forensics: Tracking Hackers through Cyberspace. Prentice Hall. ISBN-10: 0132564718; ISBN-13: 978-0132564717.

    Anson, S., S. Bunting, R. Johnson, and S. Pearson (2012). Mastering Windows Network Forensics and Investigation. Sybex; 2 edition. ISBN-10: 1118163826; ISBN-13: 978-1118163825.

    Garrison, C. (2011) Digital Forensics for Network, Internet, and Cloud Computing: AForensic Evidence Guide for Moving Targets and Data. Syngress. ISBN-10:1597495379; ISBN-13: 978-1597495370.

  33. Course Readings, Online Resources, and Other Purchases: none
  34. Student Expectations/Requirements and Grading Policy: Grades are based on a 1:1 ratio of points to percentage; 1 point = 1%

    Midterm Exam = 15 points/percent total weight

    Final Exam = 15 points/percent total weight

    Ten (10) classroom discussion assignments (3 points each) = 30 points/percent

    Ten (10) class participation grades (2 points each) = 20 points/percent

    Term Paper = 20 points/percent total weight (over 4 parts)


    • Content - The paper addresses all parts of assignment in sufficient depth;

    main points are thoroughly supported with examples, illustrations, and


    • Structure – The paper’s length is sufficient to adequately address the topic;the discussion is appropriate to the topic; the paper is well organized;

    conclusions are clearly identifiable and well developed; and the sequence of

    thought is logical and ideas are unified.

    • Spelling, punctuation, and grammar – The paper contains no major errors

    in these areas.

    • Readability and style – The paper contains clear words/phrases in logical

    sequence; avoids redundancies; sentence structure is varied; uses

    transitions; paper is reader-friendly and can be easily understood at first


    • Format - The paper is formatted and all sources are cited in the text and onthe reference page according to APA or other approved style.

    All factual material must be documented properly. When using a string of words ormore from a text, you must use quotation marks. You are required to provide in-text citations and references for all written submissions.

    Participation Grade Explained

    Participation means that you have (a) posted a primary discussion response as required and (b) responded to the designated number of peer posts other than your own in a substantive manner. The latter applies only to those courses requiring responsive posts on the discussion board(s). You may respond to as many posts and as often as you wish, regardless of the requirement.


    Evaluation will be made of the motivation and effort put forth by the student in completing the assignments and participating in class on such issues as actually reading and understanding the assigned materials, and being able to convey in writing a clear understanding and application of the materials.

    You need to ADD to the discussion. I will be monitoring your responses in terms of the following points:

    1. The quality of your response;

    2. Whether your response was timely and met the deadlines;

    3. The ability of your comments to motivate others in collaborative effort; and

    4. The development of the content in relation to class discussion and reading assignments.

    Check the Discussion Forums regularly and jump right into any conversations. Your comments should add significantly to the discussion by suggesting other solutions, pointing out problems or even totally disagreeing. Make sure you substantiate any comments you make with your reasons. If possible, relate your "real world" experiences to the subject matter of the class. Please note that you are expected to give quality and quantity to your response. Just saying, "I agree" is not


    A threaded discussion is a CONVERSATION between students and the instructor. Also remember that the weekly threaded discussions make up a substantial of your grade for the course. I would advise you to research your answers and think carefully about what you post. Post early and post often.

    Threaded discussion responses will be graded using the following standards:

    • 90-100=A: Student spent a considerable amount of time providing an answer

    that was well thought out and not only dealt with the topic but went beyond

    what the instructor asked them to provide. The student went back often to the topics to view and respond to any request for additional information made by the instructor. The student may have added links to a website in their response that was related to the topic. The student wrote at least one, but probably more than one, paragraph when responding to the topic.

    • 80-89=B: The student responded to the topic and addressed the question asked by the instructor but did not go into as much depth as a student who added links, described personal experiences, gave examples, etc. The student went back often to the topics and partially responded to the instructor's request for additional information.

    • 70-79=C: The student did not spend as much time answering the question and added only a little more information than s/he had to in order to get the

    assignment done. S/he may not have completely followed the directions given in the topic (e.g. going to a particular website and looking up information), but made some effort to respond in an appropriate manner. The student may have only infrequently gone back to the topics to read and respond to instructor comments or requests for additional information. The student's answer was only 3-4 sentences and s/he did not go into as much detail as needed.

    • 60-69=D: The student did not follow directions or did not respond to the specific question being asked in the threaded discussion. The student made no attempt to provide additional information in a topic when asked to do so by the instructor. The student did not write more than 2-3 sentences and showed little interest in following directions.

    • 0-59=F: The student did not complete the assignment at all or s/he did little to

    respond to what the instructor asked him/her to do when completing the

    threaded discussion topic. The student may have only written one sentence

    and showed little motivation to respond appropriately to the topic. I read your postings daily. I will post responses toward the end of the week to give

    you a chance to converse with your classmates. I may or may not post a response to a particular student's thread depending on if the post needs a response from me.

    The grade you receive for a threaded discussion response is determined by the above standards but is also determined by how your response matches up to the responses to other students for any given thread.

  36. Attendance Policy: Course Attendance at First Class Meeting – Policy for Graduate Students: For structured courses, 6000 and above, the College/Campus Dean will set the first-day class attendance requirement. Check with the College for specific information. This policy is not applicable to courses in the following categories: Educational Outreach, Open University (TV), FEEDS Program, Community Experiential Learning (CEL), Cooperative Education Training, and courses that do not have regularly scheduled meeting days/times (such as, directed reading/research or study, individual research, thesis, dissertation, internship, practica, etc.). Students are responsible for dropping undesired courses in these categories by the 5th day of classes to avoid fee liability and academic penalty. (See USF Regulation – Registration - 4.0101,

    Attendance Policy for the Observance of Religious Days by Students: In accordance with Sections 1006.53 and 1001.74(10)(g) Florida Statutes and Board of Governors Regulation 6C-6.0115, the University of South Florida (University/USF) has established the following policy regarding religious observances: (

    In the event of an emergency, it may be necessary for USF to suspend normal operations. During this time, USF may opt to continue delivery of instruction through methods that include but are not limited to: Blackboard, Elluminate, Skype, and email messaging and/or an alternate schedule. It’s the responsibility of the student to monitor Blackboard site for each class for course specific communication, and the main USF, College, and department websites, emails, and MoBull messages for important general information.

  37. Policy on Make-up Work: I DO NOT ACCEPT LATE WORK

    There is no make-up work. The failure to complete and submit an assignment when due (without prior notice) will result in an automatic grade of "zero" on that assignment.

  38. Program This Course Supports: Criminology
  39. Course Concurrence Information:

- if you have questions about any of these fields, please contact or