ELEC ENG 7010 - Mobile Phone Forensic Process and Analysis

North Terrace Campus - Summer - 2023

This immersive course introduces students to the principles of Chain of Evidence and the process of forensic analysis, by considering mobile phone devices from the point of discovery/seizure through triage and securement at the crime scene, unlocking, imaging, analysis and preparation of an expert witness report and affidavit suitable for presentation in South Australian criminal courts. The technical characteristics of mobile phone devices and inherent logs, databases, files and other records will be introduced. This may include advanced features such as health database records and encrypted messaging applications. Of particular note are standard and extended security features including authentication, encryption and data protection. Students will also be introduced to the principles of mobile phone networks and network records, and the interpretation of Call Data Records and other data available from Mobile Network Carriage Service Providers, including Lawful Call Intercept, and A and B party and data connections. Students will use appropriate licensed data analysis tools to investigate phone contents and network records. Students will be exposed through practice to relevant laws related to telecommunications interception, privacy and Court practice. Due to sensitive content, it may be necessary to provide unclassified content to mainstream students; while cleared students may be able to access sensitive, protected content in some parts of the course.

  • General Course Information
    Course Details
    Course Code ELEC ENG 7010
    Course Mobile Phone Forensic Process and Analysis
    Coordinating Unit School of Electrical & Electronic Engineering
    Term Summer
    Level Postgraduate Coursework
    Location/s North Terrace Campus
    Units 3
    Contact Intensive mode
    Available for Study Abroad and Exchange N
    Assumed Knowledge Students are assumed to have an appropriate background in law, engineering, computer science or police investigation techniques.
    Course Description This immersive course introduces students to the principles of Chain of Evidence and the process of forensic analysis, by considering mobile phone devices from the point of discovery/seizure through triage and securement at the crime scene, unlocking, imaging, analysis and preparation of an expert witness report and affidavit suitable for presentation in South Australian criminal courts.
    The technical characteristics of mobile phone devices and inherent logs, databases, files and other records will be introduced. This may include advanced features such as health database records and encrypted messaging applications. Of particular note are standard and extended security features including authentication, encryption and data protection.
    Students will also be introduced to the principles of mobile phone networks and network records, and the interpretation of Call Data Records and other data available from Mobile Network Carriage Service Providers, including Lawful Call Intercept, and A and B party and data connections.
    Students will use appropriate licensed data analysis tools to investigate phone contents and network records.
    Students will be exposed through practice to relevant laws related to telecommunications interception, privacy and Court practice.
    Due to sensitive content, it may be necessary to provide unclassified content to mainstream students; while cleared students may be able to access sensitive, protected content in some parts of the course.
    Course Staff

    Course Coordinator: Dr Matthew Sorell

    Course Timetable

    The full timetable of all activities for this course can be accessed from Course Planner.

  • Learning Outcomes
    Course Learning Outcomes
    On successful completion of this course students will be able to:


    1 Identify the key elements of 2G, 3G and 4G mobile network architectures and the dominant forms of records available for investigation
    2 Image smart phones operating Android and iOS using commercial tools and manual processes
    3 Analyse, report and visualise findings from mobile network records and mobile phone files including SQLite database logs
    4 Write an Expert Witness Report compliant with the Expert code of conduct, Joint Criminal Rules 2022


    The above course learning outcomes are aligned with the Engineers Australia Stage 1 Competency Standard for the Professional Engineer.
    The course is designed to develop the following Elements of Competency: 1.1 1.2 1.3 1.4 1.5 1.6 2.1 2.2 2.3 3.1 3.2 3.3 3.4 3.5 3.6
    University Graduate Attributes

    This course will provide students with an opportunity to develop the Graduate Attribute(s) specified below:

    University Graduate Attribute Course Learning Outcome(s)

    Attribute 1: Deep discipline knowledge and intellectual breadth

    Graduates have comprehensive knowledge and understanding of their subject area, the ability to engage with different traditions of thought, and the ability to apply their knowledge in practice including in multi-disciplinary or multi-professional contexts.

    1-4

    Attribute 2: Creative and critical thinking, and problem solving

    Graduates are effective problems-solvers, able to apply critical, creative and evidence-based thinking to conceive innovative responses to future challenges.

    1-4

    Attribute 3: Teamwork and communication skills

    Graduates convey ideas and information effectively to a range of audiences for a variety of purposes and contribute in a positive and collaborative manner to achieving common goals.

    3-4

    Attribute 4: Professionalism and leadership readiness

    Graduates engage in professional behaviour and have the potential to be entrepreneurial and take leadership roles in their chosen occupations or careers and communities.

    3-4

    Attribute 5: Intercultural and ethical competency

    Graduates are responsible and effective global citizens whose personal values and practices are consistent with their roles as responsible members of society.

    4

    Attribute 6: Australian Aboriginal and Torres Strait Islander cultural competency

    Graduates have an understanding of, and respect for, Australian Aboriginal and Torres Strait Islander values, culture and knowledge.

    4

    Attribute 7: Digital capabilities

    Graduates are well prepared for living, learning and working in a digital society.

    1-4

    Attribute 8: Self-awareness and emotional intelligence

    Graduates are self-aware and reflective; they are flexible and resilient and have the capacity to accept and give constructive feedback; they act with integrity and take responsibility for their actions.

    3-4
  • Learning Resources
    Required Resources
    All required resources are provided through links on MyUni
    Recommended Resources
    Students should have available

    - Microsoft Office or equivalent word processing, spreadsheet and drawing applications
    - MSAB XAMN Reader (available from msab.com) - Windows only (can run in VM)
    - DB Browser for SQLite
    Online Learning
    This course is available in person only.

    This course uses a variety of online resources to support learning, including:
    slides, demo documents, example code and tutorial questions
    assessment tasks, including past material and/or exemplars
    All course communications will linked via the MyUni site.

    The use of the online discussion boards is strongly encouraged for questions related to course content.

    The course gradebook will be used to return continuous assessment marks. Students should check the gradebook regularly and confirm their marks have been correctly entered.
  • Learning & Teaching Activities
    Learning & Teaching Modes
    This course consists of two weeks of intensive full-day classes
    Each day is broken up into presentation, interactive tutorial and collaborative learning exercises

    Exceptional online participation on medical grounds only may be facilitated
    Workload

    The information below is provided as a guide to assist students in engaging appropriately with the course requirements.

    There are 10 days of full-time intensive course work.

    This includes approximately:
    15 hours of course presentation
    25 hours of interactive tutorial
    40 hours of interactive group learning

    There is then a further half day Moot Court exercise
    Learning Activities Summary
    Part 1:
    Principles of Digital Forensics and Investigation
    Principles of acting as an Expert Witness
    The importance of time

    Part 2:
    Mobile Telecommunication Network Forensics
    - Introduction to mobile network architectures and their evolution from voice-centric to data-centric services
    - Billing, switching and signalling records and their interpretation
    - The related assessment task for this is Operation St Clair, based on real (sanitised) data.

    Part 3:
    Mobile Smart Phone Forensics
    - Access, acquisition and analysis
    - Interpreting specific data types
    - The related assessment task for this is Operations Cats!, based on scripted data

    Part 4:
    Moot Court
    - Students have the opportunity to participate in Moot Court and deliver their draft evidence in chief followed by cross-examination
  • Assessment

    The University's policy on Assessment for Coursework Programs is based on the following four principles:

    1. Assessment must encourage and reinforce learning.
    2. Assessment must enable robust and fair judgements about student performance.
    3. Assessment practices must be fair and equitable to students and give them the opportunity to demonstrate what they have learned.
    4. Assessment must maintain academic standards.

    Assessment Summary
    Assignment 1: Operation St Clair
    Draft Expert Witness Report due at the beginning of Week 1
    Final Expert Witness Report due one week after Moot Court
    Weighting: 30%


    Assignment 2: Operation Cats!
    Draft Expert Witness Report due 36 hours before Moot Court
    Final Expert Witness Report due one week after Moot Court
    Weighting: 30%

    Assignment 3: Health Data CTF
    CTF will be graded one week after Moot Court
    Weighting: 30%

    Assignment 4: Moot Court
    Students participate in the court process and presence their draft evidence of Operation Cats! in the court room
    Weighting: 10% participation grade

    Students are also encouraged to visit the Magistrates Court, District Court or Supreme Court to observe a real trial in operation
    Assessment Detail
    See assessment summary above
    Submission
    Assignments 1 and 2:
    Draft and final expert witness statements must be submitted each as a single PDF via MyUni.

    Feedback on the draft reports will be provided within 24 hours.

    Assignment 3:
    Is to be completed on the CTF portal (details will be supplied)

    Assignment 4:
    Is to be completed in the Moot Court facility provided in the Law School.

    As this is an intensive course, personal circumstances including illness will be considered with respect to participation and timely submission.
    Course Grading

    Grades for your performance in this course will be awarded in accordance with the following scheme:

    M10 (Coursework Mark Scheme)
    Grade Mark Description
    FNS   Fail No Submission
    F 1-49 Fail
    P 50-64 Pass
    C 65-74 Credit
    D 75-84 Distinction
    HD 85-100 High Distinction
    CN   Continuing
    NFE   No Formal Examination
    RP   Result Pending

    Further details of the grades/results can be obtained from Examinations.

    Grade Descriptors are available which provide a general guide to the standard of work that is expected at each grade level. More information at Assessment for Coursework Programs.

    Final results for this course will be made available through Access Adelaide.

  • Student Feedback

    The University places a high priority on approaches to learning and teaching that enhance the student experience. Feedback is sought from students in a variety of ways including on-going engagement with staff, the use of online discussion boards and the use of Student Experience of Learning and Teaching (SELT) surveys as well as GOS surveys and Program reviews.

    SELTs are an important source of information to inform individual teaching practice, decisions about teaching duties, and course and program curriculum design. They enable the University to assess how effectively its learning environments and teaching practices facilitate student engagement and learning outcomes. Under the current SELT Policy (http://www.adelaide.edu.au/policies/101/) course SELTs are mandated and must be conducted at the conclusion of each term/semester/trimester for every course offering. Feedback on issues raised through course SELT surveys is made available to enrolled students through various resources (e.g. MyUni). In addition aggregated course SELT data is available.

  • Student Support
  • Policies & Guidelines
  • Fraud Awareness

    Students are reminded that in order to maintain the academic integrity of all programs and courses, the university has a zero-tolerance approach to students offering money or significant value goods or services to any staff member who is involved in their teaching or assessment. Students offering lecturers or tutors or professional staff anything more than a small token of appreciation is totally unacceptable, in any circumstances. Staff members are obliged to report all such incidents to their supervisor/manager, who will refer them for action under the university's student’s disciplinary procedures.

The University of Adelaide is committed to regular reviews of the courses and programs it offers to students. The University of Adelaide therefore reserves the right to discontinue or vary programs and courses without notice. Please read the important information contained in the disclaimer.