FIT5129 Enterprise IT security - planning, operations and management - Semester 2, 2014

Enterprise networks are highly complex infrastructures that demand correct management practices in planning, operations and security. Significant challenges arise from the scale of operations required as well as the increasingly common incidents of intrusion, sabotage, espionage or data theft, and vandalism. The unit will provide students with practical foundations in planning secure networks, policy-based operations and the implementation of security. Students will also be introduced to best practices in dealing with security breaches. Practical skills will be acquired through lab activities and case studies (projects).

Mode of Delivery

Caulfield (Day)

Workload Requirements

Minimum total expected workload equals 12 hours per week comprising:

(a.) Contact hours for on-campus students:

• Two hours of lectures
• One 2-hour laboratory/tutorial

(b.) Additional requirements (all students):

• A minimum of 8 hours independent study per week for completing lab and project work, private study and revision.

Unit Relationships

Prerequisites

FIT5037 and FIT5163

Chief Examiner

Campus Lecturer

Tutors

Your feedback to Us

Academic Overview

Learning Outcomes

On successful completion of this unit, students should be able to:

• explain critical factors of enterprise security planning, operations and management;
• perform risk analysis and assessment;
• provide practical security policies, strategies and implementation plan for enterprise systems.

Unit Schedule

Week	Activities	Assessment
0		No formal assessment or activities are undertaken in week 0
1	Introduction to Enterprise Networks
2	Enterprise Networks and Cyber Security	Lab Exercises each week (Week 2 to Week 10)
3	Enterprise Networks and Cyber Security (con't)
4	Security Assessment, Planning, Solution Development and Implementation
5	Security Assessment, Planning, Solution Development and Implementation (con't)
6	Operations and Management of Enterprise IT Security
7	Operations and Management of Enterprise IT Security (con't)
8	Case studies of Enterprise IT Security - International Banking Networks, Telecommunications Networks, and Retailed Enterprise Networks	Project 1 due Friday 4PM
9	Solutions to Intrusion, Sabotage, Espionage, and Data Theft.
10	Proposed Architectures and Governance for Enterprise IT Security
11	Research on Enterprise IT Security
12	Theoretical Test	Theoretical Test in Week 12 lecture
	SWOT VAC	No formal assessment is undertaken in SWOT VAC. Project 2 due Week 14, Friday 4PM
	Examination period	LINK to Assessment Policy: http://policy.monash.edu.au/policy-bank/ academic/education/assessment/ assessment-in-coursework-policy.html

*Unit Schedule details will be maintained and communicated to you via your learning system.

Teaching Approach

Lecture and tutorials or problem classes

Assessment Summary

In-semester assessment: 100%

Assessment Task	Value	Due Date
Enterprise IT Security - Project 1 (group project)	35%	Week 8, Friday 4pm
Enterprise IT Security - Project 2 (group project)	35%	Week 14, Friday 4pm
Lab Exercises	10%	Weekly (Week 2 to Week 10) - no submission required
Theoretical Test	20%	Week 12 lecture

Assessment Requirements

Assessment Policy

Assessment Tasks

Participation

• Assessment task 1

  Title:

  Enterprise IT Security - Project 1 (group project)

  Description:

  1. Study the enterprise business of your selected organization (SO) and its computer networks,
  2. Do the risk assessment of your SO, then write the security policy for you SO,
  3. Propose a defense system with your security plan, operations and management,
  4. Present your defense system and explain how it can help protect the business of your SO.

  Please refer to the assignment specification for more details.

  Weighting:

  35%

  Criteria for assessment:

  You need to be able to understand the theory and demonstrate your practical work to your tutor.

  • If you fail to understand what you have done you will get Zero for the assignment.
  • If you can demonstrate your practical work but do not completely understand the theory, you will get a Pass at the maximum.
  • If you can demonstrate your practical work but understand 25% of the theory, you will get a Credit as the maximum. 
  • If you can demonstrate your practical work and understand 50% of the theory, you will get a Distinction as the maximum. 
  • If you can demonstrate your practical work and understand the theory well, you will get a High Distinction. 

  For group work, students will receive equal marks. However, every member of the group will be interviewed about their individual contributions.

  Due date:

  Week 8, Friday 4pm

• Assessment task 2

  Title:

  Enterprise IT Security - Project 2 (group project)

  Description:

  You are required to apply Enterprise IT security knowledge to improve the security solution you have proposed in Project 1.
  
  You will have to complete the following tasks:

  1. Explain correctly how you will carry out penetration testing of your networks.
  2. Describe correctly your plan, operations and mangement.
  3. Propose your strategies to counter possible Cyber attacks to your SO.   
  4. Describe how you can expand your defense system to provide security to thousands of servers of your SO.
  5. Present your work with strategies to deal with large scale attacks.

  Please refer to the assignment specification for more details.

  Weighting:

  35%

  Criteria for assessment:

  You need to be able to understand the theory and demonstrate your practical work to your tutor.

  • If you fail to understand what you have done you will get Zero for the assignment.
  • If you can demonstrate your practical work but do not completely understand the theory, you will get a Pass at the maximum.
  • If you can demonstrate your practical work but understand 25% of the theory, you will get a Credit as the maximum. 
  • If you can demonstrate your practical work and understand 50% of the theory, you will get a Distinction as the maximum. 
  • If you can demonstrate your practical work and understand the theory well, you will get a High Distinction. 

  For group work students will receive equal marks. However, every member of the group will be interviewed about their individual contributions.

  Due date:

  Week 14, Friday 4pm

• Assessment task 3

  Title:

  Lab Exercises

  Description:

  Lab Exercises will be handed out each week from Week 2 to Week 10. Please read the handouts for details.

  Weighting:

  10%

  Criteria for assessment:

  You will get full marks if you can complete all the exercises and demonstrate them well. Different marks will be given depending on the level of completion and demonstration.

  No submission is required.

  Due date:

  Weekly (Week 2 to Week 10) - no submission required

• Assessment task 4

  Title:

  Theoretical Test

  Description:

  The theoretical test will evaluate your understanding of the theories covered in the unit. 80% are multiple choice questions and 20% are short answer questions. You will have to study all the materials delivered in the lectures and tutorials.

  Weighting:

  20%

  Criteria for assessment:

  Correct answers to questions, demonstrating understanding of the materials learned.

  Due date:

  Week 12 lecture

Learning resources

Feedback to you

• Graded assignments with comments

Extensions and penalties

Returning assignments

Assignment submission

Online submission

If Electronic Submission has been approved for your unit, please submit your work via the learning system for this unit, which you can access via links in the my.monash portal.

Other Information

Policies

Graduate Attributes Policy

Student Charter

Student services

Monash University Library

Disability Liaison Unit