CSCI 411 Computer Security and Forensics

3 hours 

This course concerns host-based security and forensics. The first part of the course explains how security is achieved by most modern operating systems, including authentication and access control at the level of processes, memory, and file systems. The second half of the course will cover methods for monitoring an operating system to detect when security has been breached, and for collecting forensic evidence from computers and other digital devices.