48436
Assignment Introduction
Your assignment is aimed at adding current interesting information to the material provided in class.
You need to provide enough detail so that other students can replicate your work.
This is a group work assignment. Three students are in a group.
You can choose a topic from the attached topic list to work on.
You need to submit your Assignment Proposal as an upload by the end of Week 6.
You can still update the proposal after week 6 with the permission of your tutors.
The Assignment Report is due in Week 11.
You need to give a short presentation (15 mins) in the last week lab session.
The whole assignment is worth 30% and marked out of 100 marks which are allocated as follows
· The proposal takes 5 marks.
· The report takes 75 marks, where
o the general part is 30 marks
o the detail part is 45 marks.
· The presentation takes 20 marks.
Note that although this is a group assessment, your contribution is assessed by your peers. See the Peer Participation document. You may not receive the same mark as your peers.
Every group just needs to submit one set of documents, i.e., proposal, report and presentation slides. Please clearly state group members in every document.
Marking Breakdown
Proposal (5 marks):
· The topic outline.
· The group members and a schedule of their work from weeks 7 to 10.
· Confirm with screenshots that you can obtain, install and run the major Apps and/or VMs you intend to use.
· Some detail on what will be covered. Name any apps that you think important.
· Detail marking. You are expected to develop and clarify your own details based on the given samples in the topic list.
Report – General (30 marks):
We do not have report template. You can use your favourite template and reference style.
Expected report length for marking 15 - 25 pp.
Add additional reference material as an appendix as required to add value for future use.
(5 marks) Report Layout, such as colour front page, contents page which relates to assessment items, page numbers, use of formatting, tables, charts, screenshots and interesting images.
(5 marks) How we ran the project. Issues encountered and overcome.
(5 marks) Executive Summary that summarises the methods used and the main findings of your assignment. (What we Did and What we Found).
(5 marks) General discussion about Forensics, Reflection and conclusion.
(5 marks) Quality References used with summaries of their usefulness to Digital Forensics.
(5 marks) Report Detail Currency: You are expected to explore the latest tools and technologies.
Report Detail (45 marks): Choose only one of the options listed below.
1) Three other Browsers, e.g., Firefox, Ice Weasel and Safari, on other systems, e.g., MacOS.
(10 marks) Describe with screenshots how to locate cookie and history data on the device for each browser.
(20 marks) Describe how the browser handles tracking information and where you can find such evidence.
(10 marks) Where are the cache files on these devices? Can you find anything of forensic interest in the cache files?
(5 marks) What would you recommend as sound business practice to secure these Browsers?
2) Document or email Metadata.
Office documents, PDFs and Camera files may contain useful forensic evidence.
(10 marks) Explain how such documents contain metadata such as dates and authors and data structures such as embedded scripting.
(20 marks) Describe popular tools to locate and recover metadata and scripts. Some tools use a scripting language such as python. Describe how to use these tools.
(10 marks) Describe, with examples, how a malicious user embeds malware in a document and fools a target into opening the document so as to infect their PC.
(5 marks) What would you recommend as sound business practice to secure document metadata?
3) Web Analytics.
(10 marks) Explain how a company uses User tracking to improve their sales.
(10 marks) Describe how Google Analytics works with screen shots.
(20 marks) Describe how other current Web Analytics tools work. Demonstrate such a tool with screenshots.
(5 marks) What would you recommend as sound business practice to manage web analytics of your site by competitors?
4) Windows and Linux Artifacts.
(10 marks) Describe in some detail what you would look for in a full Windows and Linux Live Analysis (add to week 7/8).
(20 marks) Describe such an analysis on target machines or VMs of your choice (not your laptop or UTS Workstation). Indicate the tools used and the reasons for choosing them.
(10 marks) Describe a scripting tool that automates Live Analysis. What are its Pros and Cons?
(5 marks) What would you recommend as sound business practice for the use of a Windows System to combat unauthorised forensics?
5) Social Media Security
(10 marks) It is possible to exploit social media in a number of ways. Collecting data and impersonation are some such methods. Describe the common methods of collecting data.
(15 marks) Give some examples of the operation of tools which can collect this data.
(10 marks) Include samples of collected data that removes anonymity.
(5 marks) What would you recommend as sound business practice for the use of social media.
(5 marks) What would you recommend for enforcing company phone security?
6) Unique Group proposal
(45 marks) As agreed with the Tutor.
Presentation (20 marks):
The presentation will be assessed from the following aspects
· Time management
· Presentation structure
· Presentation clearness
· Technical soundness
· Audience engagement
· Overall performance