Apply to USF Now | Graduate Admissions | Events & Workshops | Giving to the Office of Graduate Studies

Graduate Course Proposal Form Submission Detail - CJE6627

Edit function not enabled for this course.


Current Status: Approved by SCNS - 2015-12-01
Campus: Tampa
Submission Type: New
Course Change Information (for course changes only):
Comments: Faculty withdrew for more edits 12/10/13. Resubmitted 8/21/15. To GC. For Grad Certificate in Cybersecurity. GC Approved 10/12/15. To USF 10/12/15; to SCNS 10/28/15. Nmbr 6623 approved as 6627 Effective 12/1/15


  1. Department and Contact Information

    Tracking Number Date & Time Submitted
    4815 2013-09-11
     
    Department College Budget Account Number
    Criminology BC 122100000
     
    Contact Person Phone Email
    LeGrande Gardner 8636677822 gardnerl@usf.edu

  2. Course Information

    Prefix Number Full Title
    CJE 6627 Digital Evidence Recognition and Collection

    Is the course title variable? N
    Is a permit required for registration? N
    Are the credit hours variable? N
    Is this course repeatable? N
    If repeatable, how many times? 0

    Credit Hours Section Type Grading Option
    3 C - Class Lecture (Primarily) R - Regular
     
    Abbreviated Title (30 characters maximum)
    Digital Evidence Recog & Coll
     
    Course Online? Percentage Online
    O - Online (100% online) 0

    Prerequisites

    none

    Corequisites

    none

    Course Description

    Instructs participants in the basics of recognizing potential sources of electronic evidence, preparing them to respond to an electronic crime scene, and to collect items of evidentiary value to be used in court proceedings.


  3. Justification

    A. Please briefly explain why it is necessary and/or desirable to add this course.

    Needed for new program/concentration/certificate

    B. What is the need or demand for this course? (Indicate if this course is part of a required sequence in the major.) What other programs would this course service?

    This course will become an integral part of the Cybersecurity Certificate program and is one of five courses in the sequence.

    C. Has this course been offered as Selected Topics/Experimental Topics course? If yes, how many times?

    No

    D. What qualifications for training and/or experience are necessary to teach this course? (List minimum qualifications for the instructor.)

    MA with either 18 hrs in discipline or equivalent expertise in area of study.


  4. Other Course Information

    A. Objectives

    Upon the successful completion of this course, the student will have an

    understanding of the digital evidence artifacts as they relate to computers and other digital devices. Upon successful completion of this course of study, students will have knowledge of and be able to discuss in a knowledgeable manner:

    • Major categories of digital evidence and key terminology associated with an investigation involving digital evidence.

    • The identification of potential sources of digital evidence.

    • Techniques and tools used for preservation and collection of digital evidence.

    • Packaging and storage of digital evidence and peripheral artifacts.

    • The use of digital devices in the commission of violent crimes and related

    digital evidence.

    • The use of digital devices in the commission of non-violent crimes and related digital evidence.

    • Conducting field acquisitions and live acquisitions of volatile data.

    • Conducting on-site previews of live systems

    B. Learning Outcomes

    At the end of this course, students will be able to:

    1. Apply digital evidence concepts to investigations involving computers and

    digital devices.

    2. Describe categories of digital evidence found on digital devices and identify specific types within each category.

    3. Identify and describe specific types of digital evidence as they relate to

    different types of crimes committed using digital devices.

    4. Explain how to collect, package, and store digital artifacts and peripheral

    devices.

    5. Conduct field acquisitions and live acquisitions of volatile data using forensic software tools.

    6. Conduct on-site previews of live systems while preserving the evidential

    integrity of digital artifacts.

    C. Major Topics

    Identification, collection, acquisition, authentication, preservation,

    examination, analysis, and presentation of evidence for prosecution purposes. Skills covered include logical and physical imaging of digital evidence, the application of cryptographic hash functions to identify files, protecting digital evidence, and organizing evidence for analysis. Attention will be given to digital evidence obtained from computer hard drives as well as removable media. The course also will include the use of onsite previews and live acquisitions.

    D. Textbooks

    National Institute of Justice. Electronic Crime Scene Investigation: An On-the-Scene Reference for First Responders, 2nd Edition. Download current version from: https://www.ncjrs.gov/pdffiles1/nij/219941.pdf

    E. Course Readings, Online Resources, and Other Purchases

    United kingdom Association of Chiefs of Police Officers (ACPO). Good Practice Guide for Computer-Based Electronic Evidence. Download Current version from: http://www.7safe.com/electronic_evidence/ACPO_guidelines_computer_evidence.pdf

    US Department of Homeland Security (USDHS). Best Practices for Seizing

    Electronic Evidence v3. Download Current version from:

    http://www.forwardedge2.

    F. Student Expectations/Requirements and Grading Policy

    Grades are based on a 1:1 ratio of points to percentage; 1 point = 1%

    Midterm Exam = 15 points/percent total weight

    Final Exam = 15 points/percent total weight

    Ten (10) classroom discussion assignments (3 points each) = 30 points/percent

    Ten (10) class participation grades (2 points each) = 20 points/percent

    Term Paper = 20 points/percent total weight (over 4 parts)

    G. Assignments, Exams and Tests

    EVALUATION CRITERIA FOR ALL WRITTEN ASSIGNMENTS:

    • Content - The paper addresses all parts of assignment in sufficient depth;

    main points are thoroughly supported with examples, illustrations, and

    explanations.

    • Structure – The paper’s length is sufficient to adequately address the topic;the discussion is appropriate to the topic; the paper is well organized;

    conclusions are clearly identifiable and well developed; and the sequence of

    thought is logical and ideas are unified.

    • Spelling, punctuation, and grammar – The paper contains no major errors

    in these areas.

    • Readability and style – The paper contains clear words/phrases in logical

    sequence; avoids redundancies; sentence structure is varied; uses

    transitions; paper is reader-friendly and can be easily understood at first

    reading.

    • Format - The paper is formatted and all sources are cited in the text and onthe reference page according to APA or other approved style.

    All factual material must be documented properly. When using a string of words ormore from a text, you must use quotation marks. You are required to provide in-text citations and references for all written submissions.

    Participation Grade Explained

    Participation means that you have (a) posted a primary discussion response as required and (b) responded to the designated number of peer posts other than your own in a substantive manner. The latter applies only to those courses requiring responsive posts on the discussion board(s). You may respond to as many posts and as often as you wish, regardless of the requirement.

    NOTE: ASSIGNMENTS, E-MAILS, AND OFF-TOPIC POSTS DO NOT COUNT TOWARD THE PARTICIPATION GRADE.

    Evaluation will be made of the motivation and effort put forth by the student in completing the assignments and participating in class on such issues as actually reading and understanding the assigned materials, and being able to convey in writing a clear understanding and application of the materials.

    You need to ADD to the discussion. I will be monitoring your responses in terms of the following points:

    1. The quality of your response;

    2. Whether your response was timely and met the deadlines;

    3. The ability of your comments to motivate others in collaborative effort; and

    4. The development of the content in relation to class discussion and reading assignments.

    Check the Discussion Forums regularly and jump right into any conversations. Your comments should add significantly to the discussion by suggesting other solutions, pointing out problems or even totally disagreeing. Make sure you substantiate any comments you make with your reasons. If possible, relate your "real world" experiences to the subject matter of the class. Please note that you are expected to give quality and quantity to your response. Just saying, "I agree" is not

    enough.

    A threaded discussion is a CONVERSATION between students and the instructor. Also remember that the weekly threaded discussions make up a substantial of your grade for the course. I would advise you to research your answers and think carefully about what you post. Post early and post often.

    Threaded discussion responses will be graded using the following standards:

    • 90-100= A: Student spent a considerable amount of time providing an answer

    that was well thought out and not only dealt with the topic but went beyond

    what the instructor asked them to provide. The student went back often to the topics to view and respond to any request for additional information made by the instructor. The student may have added links to a website in their response that was related to the topic. The student wrote at least one, but probably more than one, paragraph when responding to the topic.

    • 80-89= B: The student responded to the topic and addressed the question asked by the instructor but did not go into as much depth as a student who added links, described personal experiences, gave examples, etc. The student went back often to the topics and partially responded to the instructor's request for additional information.

    • 70-79 = C: The student did not spend as much time answering the question and added only a little more information than s/he had to in order to get the assignment done. S/he may not have completely followed the directions given in the topic (e.g. going to a particular website and looking up information), but made some effort to respond in an appropriate manner. The student may have only infrequently gone back to the topics to read and respond to instructor comments or requests for additional information. The student's answer was only 3-4 sentences and s/he did not go into as much detail as needed.

    • 60-69 = D: The student did not follow directions or did not respond to the specific question being asked in the threaded discussion. The student made no attempt to provide additional information in a topic when asked to do so by the instructor. The student did not write more than 2-3 sentences and showed little interest in following directions.

    • 0-59 = F: The student did not complete the assignment at all or s/he did little to respond to what the instructor asked him/her to do when completing the threaded discussion topic. The student may have only written one sentence and showed little motivation to respond appropriately to the topic. I read your postings daily. I will post responses toward the end of the week to give you a chance to converse with your classmates. I may or may not post a response to a particular student's thread depending on if the post needs a response from me.

    The grade you receive for a threaded discussion response is determined by the above standards but is also determined by how your response matches up to the responses to other students for any given thread.

    H. Attendance Policy

    Course Attendance at First Class Meeting – Policy for Graduate Students: For structured courses, 6000 and above, the College/Campus Dean will set the first-day class attendance requirement. Check with the College for specific information. This policy is not applicable to courses in the following categories: Educational Outreach, Open University (TV), FEEDS Program, Community Experiential Learning (CEL), Cooperative Education Training, and courses that do not have regularly scheduled meeting days/times (such as, directed reading/research or study, individual research, thesis, dissertation, internship, practica, etc.). Students are responsible for dropping undesired courses in these categories by the 5th day of classes to avoid fee liability and academic penalty. (See USF Regulation – Registration - 4.0101,

    http://usfweb2.usf.edu/usfgc/ogc%20web/currentreg.htm)

    Attendance Policy for the Observance of Religious Days by Students: In accordance with Sections 1006.53 and 1001.74(10)(g) Florida Statutes and Board of Governors Regulation 6C-6.0115, the University of South Florida (University/USF) has established the following policy regarding religious observances: (http://usfweb2.usf.edu/usfgc/gc_pp/acadaf/gc10-045.htm)

    In the event of an emergency, it may be necessary for USF to suspend normal operations. During this time, USF may opt to continue delivery of instruction through methods that include but are not limited to: Blackboard, Elluminate, Skype, and email messaging and/or an alternate schedule. It’s the responsibility of the student to monitor Blackboard site for each class for course specific communication, and the main USF, College, and department websites, emails, and MoBull messages for important general information.

    I. Policy on Make-up Work

    I DO NOT ACCEPT LATE WORK

    There is no make-up work. The failure to complete and submit an assignment when due (without prior notice) will result in an automatic grade of "zero" on that assignment.

    J. Program This Course Supports

    Criminology


  5. Course Concurrence Information



- if you have questions about any of these fields, please contact chinescobb@grad.usf.edu or joe@grad.usf.edu.