Cyber Forensics and Incident Response (CyFIR) Track

A sequence of courses leading to the CyFIR certificate

The Cyber Forensics and Incident Response (CyFIR) track prepares students in information security and digital
investigations through a skill-based curriculum using state-of-the-art software. The track is open to students in
Pittsburgh and is taught by instructors from the CERT Division at Carnegie Mellon’s Software Engineering Institute.
The CERT Division is well known for having the first computer security incident response team, called the CERT 
Coordination Center.

Students pursuing the track devote a total of 48 units of their curriculum to understanding the science and
developing skills in host/network cyber forensics and digital investigations. To satisfy the track, students must
devote a security elective (12 units) and the curriculum option (36 units) to completing the track’s courses.
Students must successfully pass all of the CyFIR track courses in order to receive the certificate.

Is the CyFIR Track right for you?

Consider pursuing the Cyber Forensics and Incident Response track if you have a strong interest in information security and enjoy the following:

Deciphering Puzzles

Through the track, you will develop the skills necessary to search for and analyze digital evidence on computer systems using professional methods. You will use these skills to investigate cyber security breaches to determine and implement effective solutions.

Solving Problems

As computer criminals evolve in their hacking abilities, specialists in information security must remain one step ahead. Students in the track will learn critical incident response skills from members of the CERT Division. Handson projects will provide experience managing and solving information security problems.

Pursuing an Exciting Career Path

The demand for information technology professionals continues to grow steadily, and hiring managers are placing a priority on filling the information security positions within their organizations. Employers in a variety of sectors will be eager to hire graduates with the special skills acquired through the track.

Courses

The Cyber Forensics and Incident Response Track (CyFIR) is made up of the following courses:

  • 14-761 Applied Information Assurance (prerequisite to all other track courses)
  • 14-822 Host-Based Forensics
  • 14-823 Network Forensics
  • 14-832 Cyber Forensics and Incident Response Capstone

The track results in a CyFIR certificate issued from the CERT Division. To satisfy the track, students must devote a security elective (12 units) and the curriculum option (36 units) to completing the track's courses.

Students must successfully pass all of the CyFIR track courses in order to receive the certificate.