29 courses with the subject CSA, each shown exactly as we captured it from the college's catalog, with every element we hold. Where the wording looks broken, that is our reading of the catalog, not the college's text.
CSA 101Cybercrime and Electronic Evidence3
Digital Forensics and electronic evidence cannot be divorced from the law, whether civil or criminal. A digital forensic examiner needs knowledge of the law to effectively perform his or her job. Moreover, the generation of electronic evidence in all types of crime continues to increase at an exponential rate. This course balances technology and law as it enters the world of cybercrime by exploring what cybercrime is; how it is investigated; and the regulatory and legal framework surrounding the collection and use of electronic evidence. Students are introduced to the technology involved in the commission and investigation of cybercrimes. Students explore the technical and legal challenges in searching for, extracting, and preserving electronic evidence, while simultaneously looking at the legal implications of crimes that are committed in the realms of cyberspace. In addition to Cyber Security Administration, this course addresses implications that are crucial for a variety of fields and disciplines, including computer science, criminal justice, business, health care, and pre-law. Fall.
This foundation course provides managers with the essential framework needed to design and develop an effective information security program. Emphasis is placed on the Information Technology (IT) risk management process. Students explore methods used to raise general security awareness, review current industry practices and develop expertise needed to adapt policies to safeguard proprietary information. Instruction focuses on key security principles that are critical to protecting information assets and network infrastructure in open access computing environments. The principles of authentication, data integrity, privacy (encryption), access control, trust and non-repudiation are explored in detail. Students will perform lab exercises to connect the theory of risk management to practical execution. The concept of open access is discussed along with how effective security initiatives enable eBusiness. Fall.
CSA 101 - Cybercrime and Electronic Evidence and CPSC 140 - Fundamentals of Information Technology . Fall.
CSA 202Digital Forensics II3
Expands on the knowledge base and skill set developed in Digital Forensics I (CSA 201). It provides comprehensive, hands-on experience using Forensic Tool Kit (FTK), as well as an introduction to Magnet Axiom, and Autopsy. This course will also prepare students to sit for the ACE Certification exam, which is an internationally recognized forensic certification awarded by AccessData to those who demonstrate expert ability in the use of FTK. In addition, students will be required to generate various forensic reports, and draft executive summaries and timelines. Cloud forensics, cryptocurrency forensics, password cracking, and steganography will also be addressed. Like Digital Forensics I, this course is taught with a heavy emphasis of hands-on exercises and exams, and the use of critical thinking skills and reasoning skills to solve a variety of digital “whodunit” type scenarios.
The sheer amount of online information available about any individual is both impressive and disturbing. With nothing more than a name or email address, it is possible to recover significant amounts of personal information. This course provides the student with the skill-set and advanced knowledge base to employ online search techniques and strategies and engage in detailed information gathering from the surface web, deep web, and dark web. Students will have extensive hands-on experience with a wide array of web-based informational sources, systems, and tools commonly referred to as OSINT, or Open-Source Intelligence Techniques. This course is a necessity for Cyber Security majors (digital forensics and ethical hackers) but has significant and extremely relevant application to a variety of other disciplines and professions, such as private investigators, law enforcement, attorneys, paralegals, sales and marketing, management professionals, financial industry professionals, health care, human resources directors, and others. It blends critical thinking and reasoning skills with cuttingedge OSINT analytic techniques and tools.
Cyber Ethics will explore the ethical, moral, and legal implications of technology, specifically in the cybersecurity field. Students will investigate and analyze ethical dilemmas relating to cybersecurity, hacking, privacy, AI, and social media. Students will connect ethical theory to real world events in a series of reflective assignments. Students will develop the tools to tackle ethical challenges in their professional careers.
“Virtual currencies, especially Bitcoin, have intrigued some, alarmed others, and baffled many,” once noted U.S. Senator Thomas Carper. Although cryptocurrencies have become a global phenomenon, their complexity continues to puzzle a vast majority, including professionals in banking, consulting, and tech sectors. Beyond the surface-level excitement and media buzz, there remains a substantial gap in understanding the intricate workings and potential of cryptocurrencies. This course is designed to bridge that gap with a focus on the high-demand skills of tracing cryptocurrency transactions-an essential capability in the realms of financial security, law enforcement, and compliance. Through a structured curriculum, students will learn to use state-of-the-art tools for tracking Bitcoin, Ethereum, and other cryptocurrencies, analyzing transaction paths, and identifying anomalous activities. This course utilizes a mix of lectures, interactive labs, guest lectures from industry experts, and a comprehensive final project to provide a robust learning experience that emphasizes practical skills and real-world applications.
In today’s interconnected world, understanding the intricacies of digital privacy and security is more crucial than ever. This comprehensive course offers an in-depth exploration of the digital privacy regulatory landscape, both in the U.S. and internationally, preparing students to adeptly navigate and apply these regulations in various professional settings. Students will gain a thorough understanding of key privacy principles and the legal frameworks that govern the collection, storage, and sharing of data. This knowledge is vital for professionals tasked with ensuring organizational compliance with evolving privacy laws and for those aiming to safeguard sensitive personal and corporate information. The course includes studies of the U.S. regulatory framework including the Federal Trade Commission (FTC) acts, Health Insurance Portability and Accountability Act (HIPAA), Children’s Online Privacy Protection Act (COPPA), and state-specific laws like the California Consumer Privacy Act (CCPA), as well as international regulations such as the GDPR (General Data Protection Regulation) in the EU, PIPEDA in Canada, and other significant international privacy regulations. Additionally, the course is designed to prepare students for the Certified Information Privacy Professional/United States (CIPP-US) certification, recognized globally as a key credential in the field of privacy. Fall (alternate years).
Prepare to master the art of online investigation with our Complex Online Investigations course. This dynamic course is designed to synthesize and expand upon the investigative skill sets students have acquired in previous courses such as Digital Forensics and Open Source Intelligence (OSINT) and focuses on the methodologies and techniques essential for conducting complex online investigations. Students will engage with a variety of digital tools and platforms, applying rigorous investigative techniques in a controlled, scenario-based environment. The course structure revolves around intricate fictional cases simulating realworld complexities of cybercrimes and digital deception, allowing students to develop and demonstrate their investigative skills in realistic contexts, and to navigate the ethical and legal implications of online investigations to ensure all activities are compliant with applicable laws and standards. This course is also an ideal choice for students aiming for careers in law enforcement, regulatory compliance, or business. Fall (alternate years).
Hackers and disgruntled employees are using sophisticated tools and applications to steal intellectual property and expose sensitive information, and they are adept at covering their tracks in the process. This comprehensive, technically detailed course provides students with the skill-set, knowledge base, and hands-on experience to effectively respond to any type of system intrusion. Students are guided through the entire process and spectrum of tasks associated with incident response, beginning with the establishment of an incident response plan and assembling an incident response team and tools. Students will use a variety of digital forensic tools and techniques to identify, respond to, and recover from both an insider and outsider attack, and reinforce the organization’s security posture. Students will also learn how to analyze malicious code for evidence, and generate well-written reports that can be used internally or in a courtroom.
As Apple continues to expand its footprint in both the private and corporate sectors, the demand for forensic expertise tailored to Apple’s ecosystem grows significantly. Building on the foundation set in Digital Forensics I and II, which primarily focused on the Windows operating system, this advanced course is designed to enhance students’ skills and knowledge by focusing on the identification, extraction, decoding, and interpretation of data from Apple devices. Students will explore the specialized tools and methodologies applicable to Apple’s operating systems and file systems such as APFS and HFS+. The course will be delivered through a combination of lectures, hands-on labs, and case studies. Students will engage in practical exercises that simulate real-world forensic investigations, reinforcing their learning and preparing them to handle complex forensic challenges in the Apple ecosystem.
In today’s digital age, mobile devices such as cell phones have transcended their basic role as communication tools, evolving into vital components of our daily lives with functionalities ranging from GPS navigation and internet connectivity to social media interaction and IoT device management. As these devices become more embedded in our routine and their capabilities expand, the volume of data they store also grows significantly. Mobile Device Forensics is tailored to equip students with advanced skills necessary for the analysis and interpretation of data during cell phone investigations. This course covers the spectrum of commonly used tools and techniques for recovering data from Android, iOS, and other mobile devices, providing a comprehensive understanding of the sources of cell phone data and the evidence they can hold, as well as an understanding of the encryption methods employed by modern mobile devices and strategies for accessing protected information. The course is delivered through a blend of lectures, practical lab sessions, and project-based assessments. Students will engage in real-world scenarios that require them to apply their skills in recovering and analyzing data from mobile devices, preparing them for careers in digital forensics. Mobile Device Forensics is an indispensable course for students aiming to specialize in the rapidly growing field of digital forensics, reflecting the increasing relevance and complexity of mobile devices in legal and security contexts
The Dark Web, often misunderstood and shrouded in mystery, represents a vast portion of the internet that is not indexed by traditional search engines like Google. This course delves into the depths of the Dark Web, comparing and contrasting it with the surface web that most people use daily. Often likened to the wild west of the 1800s due to its unregulated nature, the Dark Web is a space where anonymity is king and virtually anything can be bought and sold. This hands-on course introduces students to the tools and methodologies necessary to navigate and investigate the Dark Web. Utilizing TOR (The Onion Router), VPNs, and virtual machines students will learn how to access the Dark Web while maintaining security and anonymity. The course will cover the creation of online personas and employ a variety of digital forensic tools and techniques to evaluate and manage online threats effectively. Students will learn the architecture and distinct characteristics of the Dark Web and be able to gather and analyze digital evidence and prepare detailed and coherent reports of their findings. The course features a combination of lectures, lab exercises, and project-based learning. Students will also engage directly with the Dark Web under close supervision, using simulation and real-world scenarios to hone their investigative skills. This course offers a unique and critical skill set for students interested in cybersecurity, law enforcement, or digital forensics, providing them with the knowledge and tools necessary to understand and engage with one of the most elusive parts of the internet. Caveat: Students should be aware that the content encountered on the Dark Web can be explicit and disturbing. Although appropriate measures will be taken to ensure that exposure to harmful material is minimized and handled with sensitivity, elimination of exposure to such material is not possible.
Unlike their “black-hat” counterparts, ethical hackers employ their skill-sets and knowledge base to identify weaknesses and vulnerabilities in computers and computer systems so risks can be mitigated before a breach occurs. This course serves as an introduction to the world of hacking. Students will learn the legal and ethical considerations and consequences of hacking, as well as the steps and methodologies required to complete a penetration test or perform an ethical hack. Using hands-on exercises and training, students will learn how to conduct reconnaissance of a target system and how to properly utilize and interpret the results of modern-day hacking tools. Tool coverage includes Kali, Metasploit, Nmap, Netcat, and others. Exposure to the Linux operating system, TCP/IP protocols, and cryptography will also be incorporated into the material.
Hackers are innovators who constantly find new ways to attack information systems and exploit system vulnerabilities. Savvy businesses proactively protect their information systems by engaging the services and expertise of IT professionals skilled in beating hackers at their own game (often called “white hat hackers” or “ethical hackers”). Such professionals employ the very skills and techniques hackers themselves use to identify system vulnerabilities and access points for penetration to prevent hackers’ unwanted access to network and information systems. This course will instruct students in the advanced concepts of hacking such as step-by-step methodologies that hackers actually use, writing virus codes, and reverse engineering, so he or she is better prepared to protect corporate infrastructure from data breaches. Students will master advanced network packet analysis and advanced system penetration testing techniques to build their network security skill-set and beat hackers at their own game. It is expected that students will be eligible to sit for the EC-Counsel Certified Ethical Hacker (CEH) certification exam. The Certified Ethical Hacker (CEH) is an intermediate-level credential offered by the International Council of E-Commerce Consultants (EC-Council). The CEH is a must-have for IT professionals pursuing careers in ethical hacking. CEH credential holders possess skills and knowledge on hacking practices in areas such as footprinting and reconnaissance, scanning networks, enumeration, system hacking, Trojans, worms and viruses, sniffers, denial-of-service attacks, social engineering, session hijacking, hacking web servers, wireless networks and web applications, SQL injection, cryptography, penetration testing, evading IDS, firewalls, and honeypots. The CEH certification is recognized as one of the top five Information Security Certifications of 2019 ( https://www.businessnewsdaily.com/10708-information-security-certifications.html ).
CSA 420 (with a final grade of C+ or better). Spring (alternate years).
CSA 431Automobile - Drone - IoT Forensics3
Modern technology has transformed not only how we live but also the devices we use daily. This advanced forensics course dives into the forensic examination of three rapidly evolving technological areas: automobiles, drones, and IoT devices. Each of these domains features complex systems with significant implications for digital forensics. The class is structured into three distinct sections, focusing respectively on automobile forensics, drone forensics, and IoT forensics. With automobiles integrating upwards of 70 computer systems to enhance safety and convenience-ranging from infotainment and navigation to telematics and mobile connectivity-the potential for recovering valuable digital evidence is enormous. Similarly, drones, which are used for everything from recreation to critical commercial applications, contain flight logs and other data crucial for forensic analysis. The IoT section addresses devices as varied as personal assistants, smart doorbells, cameras, and internet-connected appliances, all of which can provide key insights due to their interconnected nature.
“Cloud computing” (also called simply, “the cloud”) describes the act of storing, managing and processing data online, as opposed to on your own physical computer or network. In this course, students will learn Cloud Computing basics using one of the major cloud platforms. Students will be guided in the creation of an account, planning resources for cloud systems, creating virtual machine instances, accessing them, ect. By the end of this course, students should be able to create their own web cluster with databases and, setup users with credentials to manage the resources/virtual machines either through their management control interface or using CLI API. Students will also learn the best practice in cloud security and debugging service interaction issues may arise in the cloud systems.