Apply to USF Now | Graduate Admissions | Events & Workshops | Giving to the Office of Graduate Studies

Graduate Course Proposal Form Submission Detail - CJE6624

Edit function not enabled for this course.

Current Status: Approved by SCNS - 2014-04-30
Campus: Tampa
Submission Type: New
Course Change Information (for course changes only):
Comments: Required for Cybercrime Cert. To GC; approved 12/10/13 - To USF Sys 2/4/14, to SCNS 2/12/14. Approved effective 4/1/14

  1. Department and Contact Information

    Tracking Number Date & Time Submitted
    4816 2013-09-11
    Department College Budget Account Number
    Criminology BC 122100000
    Contact Person Phone Email
    LeGrande Gardner 8636677822

  2. Course Information

    Prefix Number Full Title
    CJE 6624 Introduction to Digital Evidence

    Is the course title variable? N
    Is a permit required for registration? N
    Are the credit hours variable? N
    Is this course repeatable? N
    If repeatable, how many times? 0

    Credit Hours Section Type Grading Option
    3 C - Class Lecture (Primarily) R - Regular
    Abbreviated Title (30 characters maximum)
    Course Online? Percentage Online
    O - Online (100% online) 0





    Course Description

    This course is designed to facilitate development of the basic knowledge and skills necessary to recognize, identify, collect, and preserve digital evidence in any kind of criminal investigation. Focus is upon a wide array of digital technologies.

  3. Justification

    A. Please briefly explain why it is necessary and/or desirable to add this course.

    Needed for new program/concentration/certificate

    B. What is the need or demand for this course? (Indicate if this course is part of a required sequence in the major.) What other programs would this course service?

    This course will become an integral part of the Cybersecurity Certificate program and is one of five courses in the sequence.

    C. Has this course been offered as Selected Topics/Experimental Topics course? If yes, how many times?


    D. What qualifications for training and/or experience are necessary to teach this course? (List minimum qualifications for the instructor.)

    MA with either 18 hrs in discipline or equivalent expertise in area of study.

  4. Other Course Information

    A. Objectives

    Upon the successful completion of this course, the student will have an

    understanding of the extent and characteristics of digital evidence as they relate to criminal investigations. Upon successful completion of this course of study, students will have knowledge of and be able to discuss in a knowledgeable manner:

    • Major categories of digital evidence and key terminology associated with the study of this phenomenon.

    • General characteristics of cyber criminals and modes of operation.

    • Digital evidence terminology, binary data concepts, and digital forensic


    • Components and operations of computers and digital storage media.

    • Laws regarding the seizure and search of digital evidence.

    • Digital evidence concepts and procedures for the collection of digital


    • Examination of digital evidence and data hiding techniques.

    • The history of the Internet and the Internet as a crime scene.

    • Basics of network components, operations, and hostile attacks.

    B. Learning Outcomes

    At the end of this course, students will be able to:

    1. Describe categories of digital evidence and identify specific types within each category.

    2. Identify and explain common operating systems and file structures of each.

    3. Apply legal concepts of evidence to digital systems and artifacts.

    4. Explain the key components of a digital search warrant and describe how

    they comply with rules of search and seizure.

    5. Apply digital evidence concepts to the investigations of networks and crimes

    on the Internet.

    C. Major Topics

    Topics will include legal and evidentiary considerations in the field and the courtroom, foundations of digital forensics, applying forensic science to digital technologies, digital crime scenes and digital investigations, computer basics for digital investigators, operating system concepts to include disk, file, and directory structures of major operating systems, variations among operating systems, network basics, overview of network protocols and digital evidence on networks, and digital evidence on the Internet. The course

    examines legal and criminal justice strategies to combat cybercrime and to

    investigate and arrest perpetrators.

    D. Textbooks

    Casey, E. (2011). Digital Evidence and Computer Crime, 3rd Edition.

    Elsevier/Academic Press. ISBN-10: 0123742684; ISBN: 978-0-12-374268-1

    E. Course Readings, Online Resources, and Other Purchases


    F. Student Expectations/Requirements and Grading Policy

    Grades are based on a 1:1 ratio of points to percentage; 1 point = 1%

    Midterm Exam = 15 points/percent total weight

    Final Exam = 15 points/percent total weight

    Ten (10) classroom discussion assignments (3 points each) = 30 points/percent

    Ten (10) class participation grades (2 points each) = 20 points/percent

    Term Paper = 20 points/percent total weight (over 4 parts)

    G. Assignments, Exams and Tests


    • Content - The paper addresses all parts of assignment in sufficient depth;

    main points are thoroughly supported with examples, illustrations, and


    • Structure – The paper’s length is sufficient to adequately address the topic;the discussion is appropriate to the topic; the paper is well organized;

    conclusions are clearly identifiable and well developed; and the sequence of

    thought is logical and ideas are unified.

    • Spelling, punctuation, and grammar – The paper contains no major errors

    in these areas.

    • Readability and style – The paper contains clear words/phrases in logical

    sequence; avoids redundancies; sentence structure is varied; uses

    transitions; paper is reader-friendly and can be easily understood at first


    • Format - The paper is formatted and all sources are cited in the text and onthe reference page according to APA or other approved style.

    All factual material must be documented properly. When using a string of words ormore from a text, you must use quotation marks. You are required to provide in-text citations and references for all written submissions.

    Participation Grade Explained

    Participation means that you have (a) posted a primary discussion response as required and (b) responded to the designated number of peer posts other than your own in a substantive manner. The latter applies only to those courses requiring responsive posts on the discussion board(s). You may respond to as many posts and as often as you wish, regardless of the requirement.


    Evaluation will be made of the motivation and effort put forth by the student in completing the assignments and participating in class on such issues as actually reading and understanding the assigned materials, and being able to convey in writing a clear understanding and application of the materials.

    You need to ADD to the discussion. I will be monitoring your responses in terms of the following points:

    1. The quality of your response;

    2. Whether your response was timely and met the deadlines;

    3. The ability of your comments to motivate others in collaborative effort; and

    4. The development of the content in relation to class discussion and reading assignments.

    Check the Discussion Forums regularly and jump right into any conversations. Your comments should add significantly to the discussion by suggesting other solutions, pointing out problems or even totally disagreeing. Make sure you substantiate any comments you make with your reasons. If possible, relate your "real world" experiences to the subject matter of the class. Please note that you are expected to give quality and quantity to your response. Just saying, "I agree" is not


    A threaded discussion is a CONVERSATION between students and the instructor. Also remember that the weekly threaded discussions make up a substantial of your grade for the course. I would advise you to research your answers and think carefully about what you post. Post early and post often.

    Threaded discussion responses will be graded using the following standards:

    • 90-100=A: Student spent a considerable amount of time providing an answer

    that was well thought out and not only dealt with the topic but went beyond

    what the instructor asked them to provide. The student went back often to the topics to view and respond to any request for additional information made by the instructor. The student may have added links to a website in their response that was related to the topic. The student wrote at least one, but probably more than one, paragraph when responding to the topic.

    • 80-89=B: The student responded to the topic and addressed the question asked by the instructor but did not go into as much depth as a student who added links, described personal experiences, gave examples, etc. The student went back often to the topics and partially responded to the instructor's request for additional information.

    • 70-79=C: The student did not spend as much time answering the question and added only a little more information than s/he had to in order to get the

    assignment done. S/he may not have completely followed the directions given in the topic (e.g. going to a particular website and looking up information), but made some effort to respond in an appropriate manner. The student may have only infrequently gone back to the topics to read and respond to instructor comments or requests for additional information. The student's answer was only 3-4 sentences and s/he did not go into as much detail as needed.

    • 60-69=D: The student did not follow directions or did not respond to the specific question being asked in the threaded discussion. The student made no attempt to provide additional information in a topic when asked to do so by the instructor. The student did not write more than 2-3 sentences and showed little interest in following directions.

    • 0-59=F: The student did not complete the assignment at all or s/he did little to

    respond to what the instructor asked him/her to do when completing the

    threaded discussion topic. The student may have only written one sentence

    and showed little motivation to respond appropriately to the topic. I read your postings daily. I will post responses toward the end of the week to give

    you a chance to converse with your classmates. I may or may not post a response to a particular student's thread depending on if the post needs a response from me.

    The grade you receive for a threaded discussion response is determined by the above standards but is also determined by how your response matches up to the responses to other students for any given thread.

    H. Attendance Policy

    Course Attendance at First Class Meeting – Policy for Graduate Students: For structured courses, 6000 and above, the College/Campus Dean will set the first-day class attendance requirement. Check with the College for specific information. This policy is not applicable to courses in the following categories: Educational Outreach, Open University (TV), FEEDS Program, Community Experiential Learning (CEL), Cooperative Education Training, and courses that do not have regularly scheduled meeting days/times (such as, directed reading/research or study, individual research, thesis, dissertation, internship, practica, etc.). Students are responsible for dropping undesired courses in these categories by the 5th day of classes to avoid fee liability and academic penalty. (See USF Regulation – Registration - 4.0101,

    Attendance Policy for the Observance of Religious Days by Students: In accordance with Sections 1006.53 and 1001.74(10)(g) Florida Statutes and Board of Governors Regulation 6C-6.0115, the University of South Florida (University/USF) has established the following policy regarding religious observances: (

    In the event of an emergency, it may be necessary for USF to suspend normal operations. During this time, USF may opt to continue delivery of instruction through methods that include but are not limited to: Blackboard, Elluminate, Skype, and email messaging and/or an alternate schedule. It’s the responsibility of the student to monitor Blackboard site for each class for course specific communication, and the main USF, College, and department websites, emails, and MoBull messages for important general information.

    I. Policy on Make-up Work


    There is no make-up work. The failure to complete and submit an assignment when due (without prior notice) will result in an automatic grade of "zero" on that assignment.

    J. Program This Course Supports


  5. Course Concurrence Information

- if you have questions about any of these fields, please contact or