Content area
Full text
Abstract: In this paper, a novel model for teaching digital forensic on distance has been described. Practical exercises were conducted in virtual laboratory (DF-lab) with sharable elements that every student can accessed in the same way as in the real environment. This computer science course has been developed based upon experience of using virtual environments for collaborative distance learning. Proposed laboratory applies the project-based learning methodology that engages students into integrating forensic theory with practice. The analysis of laboratory use, together with the observed fact that students tend to spend much time in Virtual Reality (VR), justify the choices taken in development of DF -lab and orientation towards integrating virtual environment with reality. The proposed model is designed to address the limitations of existing virtual laboratories or simulators used as a part in distance learning practice, as evidenced by qualitative and quantitative evaluations given at the end of this research. Efficiency is measured by comparing the students 'final results, presented in virtual and real labs. Quality is improved through student interactions, suggestions, and the pedagogical diagnosis of the students' behaviors.
1. INTRODUCTION
Over the last few years, information technology has transformed the way in which organizations operate making them vulnerable to hackers. Thus, they must reliant on professionals to protect their computing systems. Computer forensics has been developed in response to computer crime. It is the processes in which professionals use investigative methods to find digital evidence and prepare it for legal proceedings. It concerns applying of the computer investigation and analysis techniques to solve a case and provide evidence to support it. In order to recover information from encrypted files or destroyed hardware, investigators often use specific applications and software programs to examine or extract specific types of data from files and folders. There are many tools available, such as Encase [1], FTK [2], SANS Investigate Forensic Toolkit (SIFT) Workstation [3], DEFT [4], BackTrack [5], Helix live CD [6]... Although most of these tools are publicly available, they require a knowledgeable expert to ensure that meaningful and relevant evidence is located, collected, not corrupted or compromised during the acquisition process. Besides this, the forensics must document everything in a structured way. They also must leam about the different legal processes involved in...