FIT5163 Information and computer security - Semester 2, 2014

The unit aims to provide the students with in depth knowledge of techniques required to deal with security problems in information systems. The main areas of study include symmetric and asymmetric encryption techniques, cryptographic hash functions with related topics of message authentication codes and digital signatures. Study of techniques and algorithms for providing mutual trust include key management and distribution and user authentication to establish trust in the identity of communicating partner are also included. It looks at various management issues, including use and abuse of encryption, distributed systems authentication and integrity management. A range of security applications are used as examples. Students will learn how to apply cryptographic techniques in practice.

Mode of Delivery

Workload Requirements

Minimum total expected workload equals 12 hours per week comprising:

(a.) Contact hours for on-campus students:

• Two hours of lectures
• One 2-hour tutorial

(b.) Additional requirements (all students):

• A minimum of 8 hours independent study per week for completing tutorial and project work, private study and revision.

Unit Relationships

Prohibitions

FIT4016

Prerequisites

((FIT5131 or FIT9017) and (FIT5134 or FIT9018) and (FIT5132 or FIT9003 or FIT9019) and (FIT5135 or FIT9020) and (FIT5136 or FIT4037) and (FIT5130 or FIT9030)) or equivalent
Introductory knowledge of computing at the undergraduate level is assumed.

Chief Examiner

Campus Lecturer

Your feedback to Us

Previous Student Evaluations of this Unit

Students were very happy with the unit overall. Student feedback highlighted the following strengths:

• intellectually stimulating
• regular useful feedback
• tutorials and laboratory tasks
• assessments and assessment strategies
• active participation

This feedback can be used to strengthen the learning outcomes further by increasing the depth of some topics in cryptography.

Academic Overview

Learning Outcomes

• critically assess threats, vulnerabilities and risks to an organisation's information assets, and propose control technologies and techniques which can be applied to reduce the security risk;
• apply a variety of cryptographic algorithms to develop methods to disguise information to ensure its integrity, confidentiality and authenticity;
• apply a variety of methods for key management and distribution and analyse the risks associated with the various approaches;
• implement user authentication and access control mechanisms to create a security architecture to protect the assets of the information system;
• implement cryptographic techniques to preserve the security of information and evaluate its effectiveness;
• apply a variety of security control technologies to IT systems in an organisation.

Unit Schedule

*Unit Schedule details will be maintained and communicated to you via your learning system.

Teaching Approach

Assessment Summary

Examination (3 hours): 60%; In-semester assessment: 40%

Assessment Requirements

Assessment Policy

Assessment Tasks

Participation

• Assessment task 1

  Title:

  Class Tests

  Description:

  Three Class Tests will be conducted on the topics covered in this unit.  They will be held during Lectures.  Each Class Test will have a weighting of 10%.  The best two of the three scores will constitute an assessment total of 20%.

  Weighting:

  20% (10% each, best 2 attempts out of 3)

  Criteria for assessment:

  1. Quality and accuracy of answers in response to test questions.
  2. How well underlying principles and theories are demonstrated in the student's answers.

  Due date:

  Week 4, 8 and 12 Lectures

• Assessment task 2

  Title:

  Group Assignment - Biometrics in Cryptography

  Description:

  In this assignment students will be working in groups of two or three members. This assignment explores how the iris image of an individual can be used to generate the key for private key cryptography. In other words, we would like to integrate the biometric, in this case the iris with cryptography so that security of the system authentication as well as information security can be achieved.
  
  Details of the tasks will be provided in the assignment handout. Students presentations on the assignment are due in Week 11 Tutorials. A comprehensive report is due in Week 12.

  Weighting:

  20% (Report 14%, Presentation 6%)

  Criteria for assessment:

  How well understanding of the allocated task is demonstrated.

  Each student completes an allocated task that contributes to the final report, and receives marks for that task. Students will give individual presentations of their allocated task. Peer review will assess peer learning and peer support.

  Due date:

  Presentation due Week 11 Tutorial. Report due 3PM, 24 October 2014.

Examinations

• Examination 1

  Weighting:

  60%

  Length:

  3 hours

  Type (open/closed book):

  Closed book

  Electronic devices allowed in the exam:

  None

Learning resources

Reading list

1. Cryptography and Network Security: Principles and Practice. William Stallings, 6th Edition, 2014. Prentice Hall.
2. Computer Security: Principles and Practice William Stallings and Lawrie Brown, 2012, Prentice Hall.
3. Security Engineering: A guide to building dependable distributed systems. Ross J. Anderson, 2nd Edition, 2008, John Wiley & Sons, Inc.

Feedback to you

• Informal feedback on progress in labs/tutes
• Test results and feedback
• Quiz results
• Other: Answers to discussion sheets & individual student meetings

Extensions and penalties

Returning assignments

Assignment submission

Online submission

If Electronic Submission has been approved for your unit, please submit your work via the learning system for this unit, which you can access via links in the my.monash portal.

Other Information

Policies

Graduate Attributes Policy

Student Charter

Student services

Monash University Library

Disability Liaison Unit