Computer
forensics is the recovery of digital data for use as evidence in
both civil and criminal legal proceedings, or in internal investigations
documenting violations of computer usage policies in corporate or
public agency settings. This type of evidence is important in cases
of white collar crime and industrial espionage or theft, as well
as in cases of harassment, embezzlement and conspiracy. Laws of
evidence must be known and followed to collect, preserve, analyze
and present digital data in court. These laws
also apply to organizations when they are documenting computer usage
violations by employees. This program is designed for information
technology specialists, systems analysts and network administrators.
Especially beneficial for individuals within private corporations
or public agencies who are asked to search for and identify hidden
digital data, or to analyze employee computer usage, stored or copied
files, e-mail or internet history.
A 'certificate of completion' will be issued to students upon successful completion of the program.
Students are required to register and complete the entire program to receive the certificate. Instructor permission is required to enter the program after the first class.
A total of 9.0 CEUs (90 clock/contact hours) will be granted. This program has been approved for clock hours for teacher recertification.
The UW Tacoma is partnering with the Washington State Department of
Personnel to offer Computer (Digital) Forensics for public employees. If
you are employed in the public sector you are eligible to participate in
the program. For more information go to U of W Computer Forensics
FUNDING APPROVAL
The following agencies approve this program for funding. If you would like more information about how to obtain funding through one of the following agencies please click the logos below.
COURSE
DESCRIPTIONS Program length: January 5, 2010 - August 24, 2010
Class meets: Tuesdays, 7:00 - 10:00 p.m.
Law
and Computer Forensics
Computer Forensics is a profession that differs significantly from
the image portrayed on television. The reality is that the computer
forensics expert needs much more experience than a solid background
in IT. An expert in this area needs to understand the "Big
Picture" of civil litigation, the basics of criminal law and
what can and cannot be ascertained through forensics analysis.
Required
Textbook for this class:
A Guide to Forensics Testimony: The Art & Practice of Presenting Testimony as an Expert Witness
Authors: Fred C. Smith & Rebecca G. Bace
Publisher: Addison-Wesley, ISBN 0201752794
This book will be available at the University Bookstore, 1754 Pacific
Avenue, Tacoma, WA 98402, 253-692-5784, ubstcoma@u.washington.edu .
Computer
Forensics Tools and Processes
In most investigations a computer forensics case begins with a crime
or allegation of wrong doing. The high tech examiner must be prepared
to gather evidence both in the field and in the lab. Covers tools
and processes utilized for effective information gathering.
Required Equipment for this class:
The weblink below is the instructor's recommendation for a USB to IDE/SATA hard drive adapter. You can purchase a similar item from another manufacturer if you choose as long as it has the same functionality. http://www.directron.com/bt300.html
Required
Textbook for this class:
Please check back closer to the start of this program for information about textbooks.
Applied
Computer Forensics: Case Studies
Applying findings from a computer forensic analysis is only the
first step for the computer forensics investigator. Computing investigations
consist of combining recovered digital evidence with other resources.
Focuses on the most important skills necessary for a successful
high tech investigation.
To enter the program you must demonstrate baseline technical competency in understanding and working with computers, through EITHER:
A degree in computer science, OR
Experience and training in IT (to be detailed in your application), OR
Programming experience.
If you are uncertain about whether your meet the admission requirements, please contact Michael McMillan at the Office of Continuing Studies at (253) 692-4682 or mcmilm@u.washington.edu.
Once
accepted into a certificate program, you have one year within which
to complete it.
Application
Process
Applications are now
being accepted; qualified students will be accepted on a first-come,
first-served basis until the program reaches enrollment, or until
5 p.m. three business days before class begins. After this date, applications
may be accepted on a space-available basis.
To
apply you must submit one copy of the application
form with a $50 non-refundable application fee and
application set, to include:
Your
résumé listing education and applicable experience
and
A
typed (250-word maximum) letter of application describing (a)
your relevant work experience and knowledge in one or more areas
related to software development or database development, and (b)
how the program will help you meet your professionals goals.
Applications
are evaluated by a review committee. Selection of program participants
is based on admission requirements. The application fee does not
guarantee admission to, or enrollment in, the program.
Applicants
will receive written notification of their acceptance, placement
on a waiting list, or non-acceptance after review of submitted materials.
Accepted applicants will be sent registration information for the
first-term courses.
Fees
and Tuition
Tuition is payable on a term-by-term basis. Tuition for the entire
9 month program is $2679. Tuition does not include a non-refundable
one-time certificate program application fee of $50, a registration fee of $10
per quarter and textbooks. First-term tuition and fees are due three business days before class begins.
Refunds
Students
must make a written request to withdraw. Written requests should
be sent to uwtpdctr@u.washington.edu or mailed to the KeyBank Professional
Development Center, UW Tacoma, 1900 Commerce Street, Tacoma, WA 98402.
Students withdrawing by 5 p.m. 24 hours BEFORE the program begins,
are eligible for a full refund of all fees except the $50 application
fee and $10 registration fee. There is no refund for withdrawals
after the first day of class.
Earning the Certificate
Participants are evaluated in each course. Because courses are arranged sequentially, participants need to successfully complete classes in the previous term before they advance to the next term. After successful program completion, participants earn a certificate which is presented at an annual UW Tacoma awards ceremony.
INSTRUCTORS
Jodilyn
Erikson-Muldrew earned a B.A. from the University of Washington in June of 1991
and a J.D. from Seattle University School of Law in May of 1995.
After graduating from Law School, she worked for a small public
defender firm on Whidbey Island for two and a half years, where
she represented juveniles in both criminal and civil proceedings.
She next worked as a public defender for the Thurston County Office
of Assigned Counsel for two and a half years. There she represented
people accused of felonies in all phases of the proceedings. In
August of 2001 she accepted a job with the Thurston County Prosecuting
Attorney's Office. she is still employed with the Thurston County
Prosecuting Attorney's Office. She is a Senior Deputy Prosecuting
Attorney and is the Team Leader of the Special Victims Team. She
is also assigned to provide legal assistance to the Washington State
Patrol's Missing and Exploited Children's Taskforce. She is also
a board member of the Missing and Exploited Children Task Force
Advisory Board. She presents Internet Safety Classes to schools,
PTAs and churches within Thurston County, teaches a class on Courtroom
Testimony to the Thurston County Sheriff's Office Reserve Academy
and is also an instructor for the FBI's Computer Analysis Response
Team's Moot Court which takes place two to three times a year.
Michael W. Finnie is the owner of Digital Forensic Consultants, founded in 2009. He has worked in digital forensics and electronic discovery for nearly a decade. Finnie has served in several Technical Working Groups sponsored by the US Department of Justice and the National Institute of Standards and Technology. Positions he has held include Computer Forensics Specialist for Navigant, Director of Law Enforcement Liaison for the High-Tech Crime Consortium, Investigator of the High Tech Crime Unit for Custer County, and Coordinator for the E911 System. He served as an instructor in Computer Forensics for the University of Washington Seattle and is a frequent speaker in the Puget Sound on the topic of Electronic Evidence and Computer Crime. He is a member of the High Tech Crime Consortium, Institute of Computer Forensics Professionals, Washing Chapter of the High Tech Crime Investigators Association, and VOIPSA. Finnie holds several certifications including X-Ways Forensics, Encase, Advanced Forensics Methodology, SEARCH, and Undercover Online Investigations.
Instructors and courses are subject to change.
INFORMATION
MEETINGS
For information about our meetings please click here. Information
about our Computer Forensics Certificate Program and all other programs will be available at these
meetings; staff and instructors will be available to answer your
questions. Contact Michael McMillan at the Office of Continuing
Studies at UW Tacoma for details (253 692-4682, mcmilm@u.washington.edu).
KeyBank
Professional Development Center University of Washington Tacoma (253)
692-4618, uwtpdctr@u.washington.edu
