The term team project is on mobile devices forensics (MDF).You need to apply what you have learned in the class to MDF, investigate MDF further via reading literatures and internet resources, and do necessary experiments to gain hands-on experience.
You may select the topics, devices, and methodology. The general structure of the project should include at least the following components:
- Come up with a scenario of either computer criminal scene or employee termination case.
- Make an assessment plan based on the above scenario using general forensics methodology (i.e., a structured sequence of procedures to be forensically sound)
- Acquire data from a mobile device. Store the acquired information in another medium (if you find the evidence related to your topic in Internet) or simply build a raw image using any tool at your disposal (make fictitious evidence related to your topic), regardless of what type of real time or offline analysis is conducted.
- Analyze, search, and identify evidence from the acquired mobile devices. You should demonstrate some level of complexity in such analysis. If there arent any adequate tools available for the task, you should develop an application that can solve a particular problem. Suggested programming language to use for this purpose is Python. The application can be a log analyzer that reads in a log file, extracting important information; an image digger that recovers images; and/or a pdf file diver that recovers pdf files.
- Make sure to use evidence sheet (single or multiple) to record evidence.
- Make sure necessary procedures are followed (recorded) so that any evidences recovered can be used in a court or in a case against an employee.
- Report detailed findings including executive summary with conclusion.
This project is a team project unless arranged otherwise.
You need to refer to the text about MDF, investigate literature and tools on MDF, and the lecture notes on MDF.
The presentation is scheduled for Tuesday, Dec 22, 2020.The final report is due Dec 23 at 11:59pm. Each individual of each team will have 7 minutes to present the main ideas and their own part in the team project (grading applied to individual).Please remember that the purpose of the presentation is to show a new and interesting application of what we have learned, and to exchange ideas. The presentation is not meant to be a one-way teaching session.
In terms of grading the guideline, the quality of the project, including the depth of the understanding of mobile device forensics, and the use of proper research paper format are important. Page length is usually not a crucial factor. However, a decent term project report should be at least 10 pages long (specify each name of each page in the group who is in charge of).
Finally, because of a high percentage portion of the overall, your final course grade will mainly depend on the project report and the presentation.
Good luck, and I hope you all gain valuable practical experience from this project!