MS in Cybercrime Investigation & Intelligence

Prerequisite: METCS535 or METCS625 or instructor's consent. In this course, you will be introduced to fundamental concepts and principles of cybersecurity and how to apply them in developing security mechanisms and policies. Explore topics such as basic risk assessment and management, legal and ethical issues, cyber attack defense methods and tools, security principles, models, and components. You will also learn about different crypto protocols, techniques, and tools, including symmetric and asymmetric encryption algorithms, hashing, public key infrastructure, and how they can be used. You will learn to identify security threats and techniques to defend hardware, operating systems, networks, and applications in modern computing environments. Hands-on labs using current tools will also be completed as part of the required coursework.  [ 4 cr. ]

Why do individuals and groups commit crimes in digital environments? In this course, you will explore how criminological theory helps explain cybercrime and how these insights inform modern criminal justice responses. Drawing on both micro-level and macro-level theories of crime, you will examine how traditional criminological frameworks are adapted to understand offenses such as online fraud, hacking, and other forms of cyber-enabled crime. Through case studies of real cybercrime incidents, the course explores patterns of offending, victimization, legal responses, and the broader social costs of cybercrime. By the end of the course, you will understand how theory, law, and policy shape strategies for preventing and responding to cybercrime within contemporary justice systems.  [ 4 cr. ]

How can cyber threats targeting critical infrastructure be identified, analyzed, and prevented? In this course, you will examine the evolving nature of cyberterrorism and the risks posed to national security, public safety, and critical systems. Drawing on cyber intelligence methods and real-world case studies, the course explores how malicious actors conduct information attacks, target infrastructure systems, and exploit digital technologies to advance extremist or criminal objectives. Working in a laboratory environment, you will analyze cyber incidents, examine attack strategies, and develop defensive and policy responses. By the end of the course, you will understand how cyber intelligence, digital investigation, and security strategies are used to detect, assess, and counter cyber-enabled threats to critical infrastructure.  [ 4 cr. ]

How is digital evidence recovered and analyzed during cybercrime investigations? In this course, you will develop practical skills for conducting forensic examinations of computers, digital devices, and networks. Working in the Virtual Security Lab, you will learn how investigators identify, preserve, analyze, and document digital evidence related to cybercrime incidents. The course introduces industry-standard digital forensic tools and methods used in criminal investigations and legal proceedings. Through hands-on exercises and case-based scenarios, you will examine digital artifacts, reconstruct events, and prepare forensic documentation suitable for investigative and legal contexts. By the end of the course, you will understand the principles of digital forensic investigation and how digital evidence supports cybercrime enforcement and prosecution.  [ 4 cr. ]

This course examines cryptocurrency-enabled cybercrime and the forensic investigation of blockchain transactions. You will analyze major crime types—including ransomware, romance scams, sextortion, pig-butchering schemes, and dark-web activity—while gaining a foundational understanding of blockchain architecture. Emphasis is placed on distinguishing Bitcoin-based (UTXO) and Ethereum-based (account-based) systems, identifying illicit blockchain activity, and tracing the flow of criminal cryptocurrency funds for investigative and prosecutorial purposes.  [ 4 cr. ]

Why do financial crimes continue to evolve as technology advances? Examine economic and corporate crime in today’s digital world, where fraud, corporate misconduct, fintech systems, and cryptocurrency reshape how financial offenses are committed and investigated. You will explore how organizational behavior, regulatory structures, and technological change influence fraud risks and enforcement challenges, while gaining practical insight into how investigators, regulators, and organizations detect, prevent, and respond to financial crime. By the end, you will better understand how financial crime operates in the digital age and how these insights apply to careers in investigation, compliance, and cybersecurity.  [ 4 cr. ]

This course focuses on the forensic investigation of Internet of Things (IoT) devices and ecosystems as critical sources of digital evidence in cybercrime cases. You will develop practical skills to identify, collect, analyze, and interpret forensic artifacts from smart home systems, wearable devices, gaming platforms, connected cameras, robotics, and emerging IoT technologies. Through hands-on labs, case-based analysis, and contemporary forensic tools, you will examine device-level and cloud-based evidence, reconstruct user activity and timelines, and address legal and evidentiary challenges unique to IoT investigations.  [ 4 cr. ]

This course covers important topics that students need to understand in order to effectively manage a successful cybersecurity and privacy program, including governance, risk management, asset classification and incidence response. Students are first introduced to cybersecurity & privacy policy frameworks, governance, standards, and strategy. Risk tolerance is critical when building a cybersecurity and privacy program that supports business goals and strategies. Risk management fundamentals and assessment processes will be reviewed in depth including the methodology for identifying, quantifying, mitigating and controlling risks. Asset classification and the importance of protecting Intellectual Property (IP) will prepare students to understand and identify protection mechanisms needed to defend against malicious actors, including industry competitors and nation states. Incident Response programs will cover preparation and responses necessary to triage incidents and respond quickly to limit damage from malicious actors.   [ 4 cr. ]

Provides a comprehensive understanding of digital forensics and investigation tools and techniques. Learn what computer forensics and investigation is as a profession and gain an understanding of the overall investigative process. Operating system architectures and disk structures are discussed. Studies how to set up an investigator's office and laboratory, as well as what computer forensic hardware and software tools are available. Other topics covered include importance of digital evidence controls and how to process crime and incident scenes, details of data acquisition, computer forensic analysis, e-mail investigations, image file recovery, investigative report writing, and expert witness requirements. Provides a range of laboratory and hands-on assignments either in solo or in teams. With rapid growth of computer systems and digital data this area has grown in importance. Prereq: Working knowledge of windows computers, including installing and removing software. Access to a PC meeting the minimum system requirements defined in the course syllabus.  [ 4 cr. ]

Overview of mobile forensics investigation techniques and tools. Topics include mobile forensics procedures and principles, related legal issues, mobile platform internals, bypassing passcode, rooting or jailbreaking process, logical and physical acquisition, data recovery and analysis, and reporting. Provides in-depth coverage of both iOS and Android platforms. Laboratory and hands-on exercises using current tools are provided and required.  [ 4 cr. ]

Prerequisites: MET CS 577 or consent of instructor. This course provides an in-depth exploration of the critical intersection between Artificial Intelligence (AI) and cybersecurity, focusing on two interconnected themes: protecting AI systems from vulnerabilities and harnessing the power of AI to tackle cybersecurity challenges. As AI becomes a cornerstone of modern technology, ensuring the security of AI-powered systems against adversarial attacks, backdoor attacks, and model theft is essential. Simultaneously, AI offers transformative capabilities for malware detection, intrusion prevention, and malware analysis. Through a combination of theoretical foundations, hands-on exercises, and real-world case studies, students will delve into topics such as adversarial machine learning, backdoor injection and defense, IP protection, and privacy-preserving AI. They will also learn how to design and implement AI-driven tools for identifying and mitigating cyber threats in dynamic environments. The course emphasizes practical applications, encouraging students to build resilient AI systems and utilize advanced AI techniques to enhance system security and detect emerging threats. Hands-on labs based on existing tools are provided and required.  [ 4 cr. ]

This is the first of two courses in the two-part thesis option available to Master’s degree program candidates in the Department of Applied Social Sciences. You must have completed at least four courses toward your degree and have a grade point average (GPA) of 3.7 or higher. You are responsible for finding a thesis advisor and a principal reader within the department. Please refer to the Department for further details on the application process. Both MET CJ 810 Master’s Thesis 1 and MET CJ 811 Master’s Thesis 2 must be completed within 12 months.  [ 4 cr. ]

This is the second of two courses in the two-part thesis option available to Master’s degree program candidates in the Department of Applied Social Sciences. You must have completed at least four courses toward your degree and have a grade point average (GPA) of 3.7 or higher. You are responsible for finding a thesis advisor and a principal reader within the department. Please refer to the Department for further details on the application process. Both MET CJ 810 Master’s Thesis 1 and MET CJ 811 Master’s Thesis 2 must be completed within 12 months.  [ 4 cr. ]