Carnegie Mellon University

Cyber Forensics and Incident Response (CyFIR) Track

The CyFIR track prepares students in information security and digital
 investigations through a skill-based curriculum using state-of-the-art software.

The track is open to students in 
Pittsburgh and is taught by instructors from the CERT Division at Carnegie Mellon’s Software Engineering Institute. 
The CERT Division is well known for having the first computer security incident response team, called the CERT 
Coordination Center.

Students pursuing the track devote a total of 48 units of their curriculum to understanding the science and
 developing skills in host/network cyber forensics and digital investigations. To satisfy the track, students must 
devote a security elective (12 units) and the curriculum option (36 units) to completing the track’s courses. 
Students must successfully pass all of the CyFIR track courses in order to receive the certificate.

Is the CyFIR Track right for you?

Consider pursuing the CyFIR track if you have a strong interest in information security and enjoy the following:

Deciphering Puzzles

Through the track, you will develop the skills necessary to search for and analyze digital evidence on computer systems using professional methods. You will use these skills to investigate cybersecurity breaches to determine and implement effective solutions.

Solving Problems

As computer criminals evolve in their hacking abilities, specialists in information security must remain one step ahead. Students in the track will learn critical incident response skills from members of the CERT Division. Hands-on projects will provide experience managing and solving information security problems.

Pursuing an Exciting Career

The demand for information technology professionals continues to grow steadily, and hiring managers are placing a priority on filling the information security positions within their organizations. Employers in a variety of sectors will be eager to hire graduates with the special skills acquired through the track.

Courses

The CyFIR Track is made up of the following courses:

14-761 Applied Information Assurance (prerequisite to all other track courses)

14-822 Host-Based Forensics

14-823 Network Forensics

14-832 Cyber Forensics and Incident Response Capstone

The track results in a CyFIR certificate issued from the CERT Division. To satisfy the track, students must devote a security elective (12 units) for MSIN or additional graduate security core course for MSIS, and the curriculum option (36 units) to completing the track's courses.

Students must successfully pass all of the CyFIR track courses in order to receive the certificate.