National Centers of Digital Forensics Academic Excellence Program (CDFAE)
CDFAE fosters the digital forensic field and encourages growth in a specific
Science, Technology, Engineering, and Mathematics (STEM)
field supporting the
National Initiative Cybersecurity Education (NICE) Framework
Domains (Investigate, Protect and Defend, Security Provision, Operate and Maintain). CDFAE Learning Objectives address 158 Knowledge, Skills, and Abilities (KSA) areas across 129 specific task areas with application to many more.
CDFAE program students will graduate with:
- An ability to resolve digital forensic problems.
- The capability to use the current techniques, skills, and tools necessary for digital forensic examination of digital media, files, operating systems, devices, networks, and applications for evidence recovery.
- The aptitudes to design, implement, and evaluate a system, process, component, or program to meet digital forensic needs.
- An appreciation of professional, ethical, legal, security, social, and continuing education and development responsibilities.
DC3's Role in Digital Forensics
The Department of Defense Cyber Crime Center (DC3) sets the standard for digital evidence processing, analysis, and diagnostics for any DoD investigation, both criminal and counterintelligence, that involves digital forensic support. Digital forensics is the application of computer science and investigative procedures involving the examination of digital evidence - following proper search authority, chain of custody, validation with mathematics, use of validated tools, repeatability, reporting, and possibly expert testimony. Beyond traditional legal purposes, the same techniques, scientific rigor, and procedural precision now support the range of military operations and courses of action including Counterintelligence and E-discovery in civil litigations.
DC3 serves as one of the designated National Cyber Centers in accordance with National Security Presidential Directive 54/Homeland Security Presidential Directive 23 (Reference (e)). DC3 also serves as the DoD Center of Excellence and establishes DoD standards for digital and multimedia forensics in coordination with the DoD Components.
DC3 is implementing the CDFAE program in direct support of
- DoD Directive Number 5505.13E, March 1, 2010
- Co-lead and DoD representative for Functional Area 3 (Domestic LE and CI) which falls under Component 4 (Cybersecurity Workforce Training and Professional Development)
DC3 chairs the CDFAE governance board comprised of Academia and Professional Organizations specific to the discipline. The governance board oversees learning objective requirements, designation, and ensuring that a holistic approach to developing digital forensics, cyber investigation, and cyber analytics education is in place.
What is CDFAE's mission?
Develop a partnership between academia and the government to establish standards and best practices for digital forensics practitioners, educators, and researchers to advance the discipline of Digital Forensics and increase the number of qualified professionals to meet the needs of law enforcement, counterintelligence, national defense and legal communities.
How is CDFAE designed?
CDFAE focuses upon building core Knowledge Domains
at multiple Skill and Ability levels across the education
spectrum. CDFAE accredits DoD and Federal education
organizations, and Academia to a Digital Forensic
Education standard based upon Knowledge, Skills, and
Abilities (KSA) utilized in field. It is an objective driven
program which progresses to topic based research and
problem solving. The CDFAE program is designed to
create an applied knowledge (Hands-On) to knowledge
applied (theoretical and research) educational
mechanism with a clear progression between the training
and education dichotomy in workforce development.
The eight Knowledge Domains represent well rounded digital forensics education topics field and the Learning Objective Levels are indicative elements of those topics. The program must provide structured advanced academic, research, and development capabilities in any or all of the digital forensics knowledge domain areas under the LOF at a level appropriate for the current curriculum of participating educational institutes while enhancing and providing supplemental support towards digital forensic objectives. This is accomplished by transitioning general knowledge areas to a specific topic application.
The CDFAE Program maps Digital Forensic Knowledge Domains to specific learning objectives including practical exercises:
What value does CDFAE add?
- Establish a common core curriculum and development of standards for education and training in Digital Forensics studies.
- CDFAE designation requires in-course peer reviews of curriculum and practicum within a three year period.
- Education model based upon core learning objectives progressing to topic driven research.
- Provides an opportunity for students to demonstrate their knowledge and skills in Digital Forensics.
- Provides employers capacity to confirm a candidate's capability to apply their knowledge.
- Develops a certifiable path to meet National Cyber needs.
- Strengthens bonds between Government, Academia, Professional Organizations, and Industry.
Why CDFAE?
Students
- Accredited skill set and awareness of current issues facing Digital Forensics investigators and examiners.
- Opportunity to be recognized where their skills can be of the greatest value.
- Valued for their highly desirable and unique skill sets.
- Capability to use the current techniques, skills, and tools necessary for digital forensic examination of digital media, files, operating systems, decives, networks, and applications for discovery and recovery of evidence.
- Aptitude to design, implement, and evaluate a system, process, component, or program to meet digital forensic needs.
- Appreciation of professional, ethical, legal, security, social, and continuing education and development responsibilities.
Education Providers
- Access to advanced digital forensic resources.
- Educators are recognized as being capable of effectively delivering theory and practicum.
- Provide students greater access to unique internship or employment opportunities.
Employers
- Hire employees with validated skill sets capable of being on task day 1.
- Understand exactly what skills the employee brings to bear.
- Be able to diversify geographical hires without compromising quality.
Who are CDFAE's Pilot Schools and Trusted Partners?
- Norwich University
- Oklahoma State University
- UTICA College
- Stevenson University
- Anne Arundel Community College
- Cyber Forensics: pp. 102, 105
- Cybercrime: pp. 121, 122
- Howard County Community College
- Johns Hopkins University - Carey Business School
- Air Force Institute of Technology (AFIT)
- Master of Science Computer Engineering
- Master of Science Computer Science
- Master of Science Cyber Operations
- American Academy of Forensic Sciences (AAFS) /Forensic Science Education Programs Accreditation Commission (FEPAC) [Board Advisor]
Interested in applying to become a CDFAE Designated Program?
Information that will be needed:
- Name of School/ College/ University/ DoD or Federal Academic Institute
- Name of Institute's relevant Department if applicable
- Types of Degree's Offered by Academic Organization
- Accreditation Granting Organization
- Organization's Mail Stop (primary physical mail address)
- Email address (non-descriptive / alias) of requesting organization