Information Package / Course Catalogue
Forensic Engineering
Course Code: YBS413
Course Type: Area Elective
Couse Group: First Cycle (Bachelor's Degree)
Education Language: Turkish
Work Placement: N/A
Theory: 2
Prt.: 1
Credit: 3
Lab: 0
ECTS: 6
Objectives of the Course

The aim of this course is to obtain information about the selection, planning, correct structuring of the information systems and necessary security measures to identify and prevent attacks. It is aimed to collect the evidence related to cyber crimes, to take the forensic copies, to analyze and to report them, and to evaluate the cases encountered in legal terms.

Course Content

Introduction to cybercrime, forensic information technologies, data recovery from disk and file systems, evidence collection, ownership verification, data validation, storage and protection, recognition and identification, operating system architectures, analysis of file structures, network analysis, system analysis, forensic information methodology, current developments in forensics.

Name of Lecturer(s)
Learning Outcomes
1.Knows the concepts of cyber crimes and informatics crimes.
2.Gains knowledge of legal regulations related to collection, classification and analysis of evidence related to cyber crime.
3.Gains knowledge of technical processes related to collection, classification and analysis of evidences related to cyber crimes.
4.Has technical knowledge and skills in creating forensic copies.
5.Knows reporting methods and techniques.
Recommended or Required Reading
1.Sam Brown, Forensic Engineering: An Introduction to the Investigation, Analysis, Reconstruction, Causality, Risk, Consequence, and Legal Aspects of the Failure of Engineered Products, 1995, US
2.Joshua B. Kardon, Guidelines for Forensic Engineering Practice, 2012, Virginia
Weekly Detailed Course Contents
Week 1 - Theoretical
The basic concepts of forensic engineering
Week 2 - Theoretical
Information crimes and forensic information technologies
Week 3 - Theoretical
Evidence collection, ownership verification, data validation
Week 4 - Theoretical
Data recovery from disk and file systems
Week 5 - Theoretical
Storage, protection, recognition and identification
Week 6 - Theoretical
Analysis of file structures
Week 7 - Theoretical
Network analysis
Week 8 - Theoretical
Autonomous system analysis
Week 9 - Theoretical
Autonomous system analysis
Week 10 - Theoretical
Operating systems analysis
Week 11 - Theoretical
Operating systems analysis
Week 12 - Theoretical
Configuration of start disks and configuration analysis
Week 13 - Theoretical
Preserving the nature of evidence of information on information systems
Week 14 - Theoretical
Current developments in forensic computing
Assessment Methods and Criteria
Type of AssessmentCountPercent
Midterm Examination1%40
Final Examination1%60
Workload Calculation
ActivitiesCountPreparationTimeTotal Work Load (hours)
Lecture - Practice132365
Assignment132026
Individual Work132026
Quiz24110
Midterm Examination19110
Final Examination112113
TOTAL WORKLOAD (hours)150
Contribution of Learning Outcomes to Programme Outcomes
PÇ-1
PÇ-2
PÇ-3
PÇ-4
PÇ-5
PÇ-6
PÇ-7
PÇ-8
PÇ-9
PÇ-10
PÇ-11
PÇ-12
PÇ-13
PÇ-14
PÇ-15
OÇ-1
3
2
3
3
2
3
2
3
1
5
2
3
2
2
2
OÇ-2
3
4
3
3
2
3
2
3
1
5
2
3
2
2
2
OÇ-3
4
2
3
3
2
2
2
3
1
5
2
3
2
2
2
OÇ-4
4
2
3
3
2
3
2
3
1
5
2
3
2
2
2
OÇ-5
3
2
3
3
2
2
2
3
1
4
2
3
2
2
2
Adnan Menderes University - Information Package / Course Catalogue
2026