CSA 336 - Incident Response and Forensics

(3 credits)

Hackers and disgruntled employees are using sophisticated tools and applications to steal intellectual property and expose sensitive information, and they are adept at covering their tracks in the process. This comprehensive, technically detailed course provides students with the skill-set, knowledge base, and hands-on experience to effectively respond to any type of system intrusion. Students are guided through the entire process and spectrum of tasks associated with incident response, beginning with the establishment of an incident response plan and assembling an incident response team and tools. Students will use a variety of digital forensic tools and techniques to identify, respond to, and recover from both an insider and outsider attack, and reinforce the organization’s security posture. Students will also learn how to analyze malicious code for evidence, and generate well-written reports that can be used internally or in a courtroom. Prerequisite(s): CSA 201 and CPSC 140. Spring (alternate years).