Follow the digital trail

October 9, 2013

From combating cyber warfare to determining the authenticity of the latest viral video, the field of digital forensics has grown quickly in the past decade. Now students in 每日大赛鈥檚 digital forensics classes are using the new digital forensics lab to learn to acquire, recover and analyze digital evidence.

Digital forensics class uses lab

鈥淭here is a great need for a quick, reliable and accurate authentication of digital information,鈥 said Hafiz Malik, assistant professor of electrical and computer engineering. 鈥淟aw enforcement agencies, as well as the private sector, need trained professionals to work in the area of digital forensics, as analysts and expert witnesses.鈥

Malik began teaching digital forensics in 2010鈥攁 course jointly offered by the Department of Electrical and Computer Engineering and the Department of Computer and Information Science鈥攁nd CIS announced a digital forensics major last winter.

Digital forensics requires hands-on skills, therefore, reading assignments and in-class discussions can only do so much to prepare students for digital forensics careers.

鈥淲e needed a lab for hands-on learning to give students the experience of using the systems,鈥 Malik said.

Now, with the digital forensics lab in place, Malik teaches students basics of digital forensics such as evidence acquisition, how to analyze evidence (or images) for information including: Where are the files? What was deleted? Where did they go after deletion? Who created a given file? What is the timeline of activities of the file?

Tracking evidence has developed from the days of following the paper trails. Investigators now follow the digital trail. Or, in many cases, they analyze the editing trail.

Students pore over information in the lab, working to put together the pieces of the puzzle. It鈥檚 the exact type of work professionals are doing in the field, Malik says.

The lab is equipped with 14 dual-monitor terminals. Students use EnCase鈥攖he preferred software in the industry and law enforcement communities. Students also learn how to use the Sleuth Kit & Autopsy, an open source forensics analysis tool.

The new lab comes at a time when interest in the field of digital forensics is growing.

鈥淚鈥檓 interested in the overall field of digital forensics,鈥 said computer engineering student Mark Waterbury. 鈥淚t鈥檚 been rising in popularity; different law enforcement agencies are seeing a greater need for skills in digital forensics.鈥

Malik agrees, saying, 鈥淛ust a few years ago there were only a few universities offering programs in digital forensics, but now many universities have started offering programs in this area. Having this lab with the latest technology is a good start as the program grows.鈥