FIT3031 Information and network security - Summer semester, 2014

This unit will provide students with an understanding of: OSI security architecture; common information risks and requirements; operation of encryption techniques; digital signatures; public key infrastructure; authentication and non-repudiation; intrusion detection and response; firewall defence; privacy and ethics issues; security configurations to PC-based applications; and design of information systems with security compliance and security standards and protocols.

Contact Hours

Workload requirements

Students will be expected to spend a total of 36 hours per week during summer semester on this unit as follows:

For on-campus students:

• Two x 2-hour lecture/week and
• Two x 2-hour tutorial/week
• up to 28 hours per week on average for personal study, attending newsgroup discussions and working on assignments.

Off-campus students generally do not attend lecture and tutorial sessions, however, you should plan to spend equivalent time working through the relevant resources and participating in discussion groups each week.

Unit Relationships

Prohibitions

CPE3001, CPE2007, CSE2500, GCO2831, FIT2058, FIT3018, FIT4028, GCO4831

Prerequisites

One of FIT1005, FIT1031, FIT1019, FIT2008, CSE2318, CSE3318 or GCO1815

Chief Examiner

Campus Lecturer

Tutors

Academic Overview

Learning Outcomes

• describe OSI security architecture;
• describe common security standards and protocols for network security applications e.g. electronic mail, IP, web and network management;
• understand common information risks and requirements;
• explain the operation of conventional and public-key encryption techniques;
• describe the concepts and techniques for digital signatures, authentication and non-repudiation;
• understand privacy and ethics issues;
• appreciate the need for the digital certificates and public key infrastructure;
• appreciate the importance of system security against intruders and malicious software using firewalls;
• appreciate the relevance of privacy and ethics issues to organisations and individuals;
• apply simple security configurations to PC based applications e.g. email, Internet, computer administration;
• design information systems with security compliance.

Unit Schedule

*Unit Schedule details will be maintained and communicated to you via your learning system.

Assessment Summary

Examination (3 hours): 60%; In-semester assessment: 40%

Teaching Approach

Assessment Requirements

Assessment Policy

Faculty Policy - Unit Assessment Hurdles (http://intranet.monash.edu.au/infotech/resources/staff/edgov/policies/assessment-examinations/assessment-hurdles.html)

Academic Integrity - Please see the Demystifying Citing and Referencing tutorial at http://lib.monash.edu/tutorials/citing/

Assessment Tasks

Participation

• Assessment task 1

  Title:

  Assignment 1

  Description:

  This assignment is designed to test students' understanding of symmetric and asymmetric cryptographic concepts and how they can be applied in real world applications. In addition the concepts and network security applications in relation to web, wireless and electronic mail security will be tested. This will be based on the topics covered in Days 1 to 6 (until topic on Wireless Security).

  Weighting:

  20%

  Criteria for assessment:

  1. How well underlying principles and theories are demonstrated in the student's answer
  2. The appropriateness of the formatted report style
  3. The quality of the student's argument

  Further details will be provided in the assignment specification.

  Due date:

  Monday 20 January 2014, 4:00 PM

• Assessment task 2

  Title:

  Class Test

  Description:

  This class test is designed to test students' understanding of security protocols and standard practices, including IP security. This will be based on the topics covered in Days 1 to 8 (inclusive of LN08 - IP Security).
  
  Class Test on Tuesday 28 January 2014. The test will be held during the first hour of the lecture on 28 January 2014. It will cover material from LN01 to LN08 (inclusive of LN08 - IP Security).

  Weighting:

  20%

  Criteria for assessment:

  1. How well underlying principles and theories are demonstrated in the student's answer
  2. The quality of the student's argument

  Further details will be provided in the unit introduction lecture for assessment task 2 which will be a class test.

  Due date:

  Tuesday 28 January 2014, Day-10

Examinations

• Examination 1

  Weighting:

  60%

  Length:

  3 hours

  Type (open/closed book):

  Closed book

  Electronic devices allowed in the exam:

  None

Learning resources

Feedback to you

• Informal feedback on progress in labs/tutes
• Graded assignments with comments
• Quiz results
• Other: Solutions to tutes and labs will be discussed in class. Assignment feedback will be provided via comments. Test results and feedback will be provided for the class test assessment.

Extensions and penalties

Returning assignments

Assignment submission

Online submission

If Electronic Submission has been approved for your unit, please submit your work via the learning system for this unit, which you can access via links in the my.monash portal.

Required Resources

Software:

The software used in this unit is available in the public domain. The software is PGP encryption software which is available at:

http://www.pgpi.org/products/pgp/versions/freeware/win32

and

http://www.gpg4win.org/download.html

Prescribed text(s)

W. Stallings. (2013). Network Security Essentials: Applications and Standards. (5th Edition) Pearson International.

Recommended text(s)

O. Poole. (2003). Network Security - A Practical Guide. () Butterworth Heinemann.

J. H. Allen. (2001). The CERT Guide to System and Network Security Practices. () Addison-Wesley.

M. Kaeo. (2004). Designing Network Security - A Practical Guide to Creating a Secure Network Infrastructure. () CISCO Press.

R. Oppliger. (2003). Security Technologies for the World Wide Web. () Artech House.

Other Information

Policies

Graduate Attributes Policy

Student services

Monash University Library

Disability Liaison Unit

Your feedback to Us

Previous Student Evaluations of this Unit

The main highlights last year were the addition of:

• Weekly quizzes
• Real life problems in tutorials
• Lab exercises designed to run from students' laptop/desktop

The teaching team agreed to consider a class test based on student response to exams. This has been implemented for both Semester 1 and Summer Semester B. However, with OCL student enrolment included, implementation of a class test is not feasible for Semester 2.