Pedagogic Innovation in Teaching Computer Forensics

1
Pedagogic Innovation in Teaching Computer
Forensics
7th Annual Conference Teaching of Computing

• Alastair Irons
• Christopher Laing
• Philip Anderson
• Northumbria University

2
Objectives

• Introduce computer forensics as a subject
• Outline the challenges facing the teaching of
  computer forensics
• Share some of the pedagogic innovations employed
  in teaching computer forensics at Northumbria
• Discuss how these could be applied to other
  computing subjects

3
Background to Computer Forensics

• Computer forensics (from Bates 1997)
• scientific examination and analysis of data held
  on or retrieved from computer storage media,
• presentation in a court of law,
• study of the legal aspects of computer use and
  misuse.
• Sequence of
• discovery recovery,
• reconstruction analysis.

4
Computer Forensics as a Subject

• Derived from computer forensic science
• Digital evidence is different
• Intangible and invisible
• Volatile
• Just ones and zeros
• Complex for juries?
• Need to take into account of
• How evidence has been obtained
• Evidential integrity continuity

5
Challenges in Teaching Computer Forensics

• Similarities to the challenges faced in teaching
  computing and computer science
• Balancing teaching of application and theory
• Programming
• Embedding ethics
• Rapidly changing / developing environment
• Training versus education.
• Need to consider complexity and size of cases
• What to leave out from already full curriculum ?
• Opportunity to integrate and contextualise

6
Ethics for Computer Forensics

• Particular issue for computer forensics
• potential to misuse the techniques and skills
• some of the subject matter is sensitive in nature
• Professional and ethical expectations and
  requirements

7
Pedagogic Innovations for Computer Ethics

• Address computer ethics right from day one
• Discuss computer ethics in context
• Investigate the potential and dangers of misuse
• Make use of contextualised ethical dilemmas
• Students developed their own ethical code
  involving them in the curriculum as stakeholders
• Second year students to work with first year
  students to explore the computer ethics issues in
  computer forensics

8
Resources for Computer Forensics

• Technology developing and changing rapidly
• Constant challenge to keep one step ahead of the
  computer criminals
• Licence for industry standard computer forensics
  software is very expensive
• Challenge in authentic learning
• basics and principles across without overwhelming
• maintaining realistic case studies and problem
  based learning materials

9
Pedagogic Innovations - Resources

• Specially commissioned laboratory
• Provided resources that students expect
• Autonomous
• Access only to computer forensics students
• role of base room for students
• Facility used by practitioners
• emphasises state of the art for students
• Students positive about resource

10
Pedagogic Innovations Practitioner Series

• Programme designed in collaboration with
  practitioners
• Always the intention to integrate diverse range
  of practitioner perspective into programme
• Free ranging brief in essence to discuss
  computer forensics practice
• Not summatively assessed but used for formative
  development
• Opportunity to reflect on and include in PDP
  activities
• Helped in develop links with employers
• Positive impact on student learning

11
Lessons for other CS Disciplines

• Contextualise syllabus and learning
• Embedding subjects like computer ethics
• Use to link together syllabus holistic approach
• Consider making use of resources to facilitate
  learning and student feelings of belonging
• Integrate practitioners into syllabus
• Many give their time for free and will add
  meaning and value for students

12
Summary

• Attrition much less of a problem
• Able to develop strong cohort identity
• peer group and relationship with academic staff
• Able to promote holistic syllabus
• Encourage students to engage in extra curricular
  activities helps promote ownership of their
  learning