About the Computer & Digital Forensics Program

Forensics is the application of science and technology to civil and criminal legal investigations. While most forensics programs focus on the traditional approaches — fingerprints, DNA, photography — the Champlain College program targets cyberforensics — forensic analysis and procedures of the new millennium. The A.S. program focuses on the basics of computer forensics with an emphasis on the legal aspects and techniques for such investigation. The B.S. adds more in-depth computer forensics courses and broadens the curriculum to include additional aspects of forensic analysis, with more of a focus on the application of the technology to an investigation and the content of what is being analyzed.

Forensics has come to the public forefront recently due to a number of events, including the events of September 11th, the increasing number of computer and network security incidents, and the emergence of a cabinet-level Department of Homeland Security. Even absent these events, an increased number of criminals employ computers and networks as the vector of committing a crime and/or the storage of information and records about their criminal activity. Computers, in fact, represent the fastest growing technology used by criminals in literally all types of crimes.

The analysis of crime scenes is also employing evolving technologies. The techniques for investigating cybercrimes are new and ever-changing as the cyberlandscape changes — including the capabilities of computers, networks, and criminals.

Traditional forensic science generally involves comparing a known sample with an unknown sample, such as comparing a latent fingerprint or DNA sample from a crime scene with a suspect's fingerprint or DNA. Computer forensics and the investigation of crimes in cyberspace are different; here we examine the evidence surrounding an event to reconstruct what actually happened. In addition, the crime scene when computers and networks are involved is global and constantly changing, a big difference from the traditional crime scene where police would merely throw yellow tape around a room to secure the evidence. Forensic computing is a cross between traditional forensic techniques with traditional investigative techniques.



The use of forensic analysis tools and investigative techniques is not of relevance to the law enforcement community alone. Indeed, the military, federal government, large network service providers and ISPs, and many other large organizations employ forensic techniques when investigating computer security incidents internal to their network, regardless of the involvement of law enforcement.

In the past, the pioneering work in digital forensics has been by computer scientists and law enforcement professionals with an interest in computers — often not working together. Over time, it has been shown that the best computer crime examiners are computer-savvy cops because they know how to conduct an investigation and they understand the technology. Despite what we see on TV and read in the papers, computer and network forensics requires knowledge of how to conduct a criminal investigation rather than just looking at the computer and expecting the incriminating information to jump out at you; every examination will differ. The professional digital forensics examiner needs to understand the law, the technology, and the investigative process. For that reason, this new hybrid education is essential. Today, computer forensics analysts are employed by a myriad set of organizations ranging from law enforcement (local, state, and federal) and government agencies to law firms and software development companies to large accounting firms and organizations with large computer networks.

Champlain College is ideally suited to offer this degree program, given our proximity to, and good relationship with, the Burlington Police Dept., the focal point of the Vermont Internet Crimes Against Children Task Force and one of the computer crime investigations centers in Vermont. Computer related skills and investigation of computer related crime is also a tremendous need in Federal law enforcement. The Federal Bureau of Investigation (FBI), the Drug Enforcement Administration (DEA), U.S. Customs, U.S. Postal Service, and other Federal law enforcement agencies are constantly seeking agents who can recognize and find cyber-evidence of false financial records, illegal transactions, money "laundering", illegal pornographic images, and other criminal activity. In fact, in order for our Criminal Justice students to be eligible for an internship with the Federal Law Enforcement Training Center (FLETC), they must have completed nine credits of computer-related courses.

Our courses and faculty strike a balance between theory and application. Students learn about real-life environments from subject matter experts, making them immediately productive upon graduation or prepared to continue learning and advancing within the field. There are many things that make this program unique and interesting:

All aspects of our society today are dependent upon information that is stored on digital devices ranging from computers and PDAs to cameras and recording devices. That's the good news. The bad news is that there are criminal elements and Bad Guys who would exploit this technology for their own purposes — and so we need professionals who can defend against these forces and strike back. Success in this field depends upon a love of computers and puzzle solving, the intellectual curiosity for life-long learning, and a strong education in the basics. Students bring the first two parts; this program provides the third.


Return to the Computer & Digital Forensics home page