The faculty of IT aims to provide a course for Masters Degree students interested in becoming, network specialists, security architects, network security specialists, etc. Therefore, there is a need for an advanced subject in network security after successful completion of the Introduction to Network Security (CPE5002). In addition, there is a realisation of the importance of a deep-understanding of network security from government and industry bodies. Many students, who have completed CPE5002, have requested an advanced subject in network security to provide an opportunity for further study in this field.

This unit is an advanced unit based on the Introduction to Network Security unit (CPE5002) for students who are interested in further study of network security

Advanced network security is important for students who want to become network security professionals

At the completion of of this unit students will:

1. Understand the design and implementation of advanced cryptographic algorithms for wired and wireless computing environments.
2. Achieve sound knowledge of network security components including the design, implementation, and configuration of
   • Firewalls,
   • Intrusion Detection Systems (static and dynamic checking of programs, anomaly detection, large-scale (Internet-wide) distributed intrusion detection, early sensing, complex attack scenario analysis, and automated response.),
   • Prevention Systems,
   • Firewalls, IDSs, VPNs and prevention systems together.
3. Develop knowledge of advanced network security architectures to allow better network protection, load balancing and recovery from attacks.
4. Achieve sound knowledge of wireless network security.
5. Understand security in trusted-based computing environments.

• Gain experience of efficient implementation of public key cryptography for wired and wireless environments
• Gain experience of design, implementation, and configurations of different type of firewalls
• Gain experience of configurations of Snort intrusion detection system
• Gain experience of applying digital signatures in prevention systems on Linux and Windows
• Become familiar with network security architectures and network security components
• Gain experience of how firewalls and IDSs work together
• Practically find the vulnerabilities in your computer system

• Experience the need of cooperative security management
• Work effectively in group to achieve a system implementation

This unit aims to provide students with an advanced knowledge of network security. Topics to be covered include the design and implementation of some important public key systems: RSA and Elliptic Curve algorithms; concepts of quantum cryptography; quantum computing and cryptography; wireless computing and cryptography; design, implementation and configuration of firewalls in depth; design, implementation and configuration of intrusion detection systems; prevention systems; advanced network security architectures; advanced wireless security: principle and practice; security in trusted-based computing environments.

Teaching methods to support the achievement of the above objectives are done by conducting lectures, tutorials and lab works (tutorial discussions, lab network set-up and configurations, exercises and tests). Students will attend a two hour lecture and a two hour tutorial or lab per week. The lectures will provide students with the fundamental theories and the tutorial and lab series will provide students with the opportunity to implement the theories, develop research and problem solving knowledge, and gain practical skills.

• The lecture stream will present the theoretical concepts and the tutorial discussions and lab experiments and exercises of the provided code, partially implemented in C and Java, of the algorithms for both wired and wireless systems will provide students better understanding of cryptography and its application in wireless and wired environments (objective 1 and 4).
• The lectures on wireless security will provide students the design principle and the experimental wireless network configuration at the lab will allow students to understand the security issues and practical implementations of wireless network security (objective 4).
• The lectures on the topics will present the design and implementation of firewalls, intrusion detection systems, VPNs, prevention systems, and the hands-on lab work will provide students a sound understanding and practical experience of firewalls and intrusion detection systems together (objective 2 and 3).
• The lectures on network security architectures, trusted-based computing environments, and load balancing in hybrid wireless and wired networks, tutorial discussions, and part of the research work for the assignments will help students understand security in trusted-based computing environments (objective 5).

The assessment methods in this subject are by: two individual assignments worth 40% of the total subject assessment, lab works (exercises and group assignments) worth 40%, and theoretical test worth 20%. Attending lab sessions is compulsory.

The lab works including lab exercises and tests link the theoretical concepts and design with the practical implementation and configurations. It also gives the students the opportunity to reinforce the theory, gain practical experiences, and work in a team. This either directly relates to the objectives 1,2 and 4. The individual assignments also provide an opportunity for the students to work independently to consolidate their theoretical knowledge and build their research and problem solving skills. The assignments will directly address the objectives 3 and 5.

Students are expected to spend an average of 12 hours per week on this subject. The breakdown of time is:

• 2 hours per week: Topic material coverage (lecture attendance)
• 2 hours per week: Scheduled labs.
• 8 hours per week: Private study to review topic materials, explore supplementary subject resources and complete practical work and assignments.

Tutorials will be held in the laboratory with 20 students per session.

Essential equipment: four 5-port switches, four wireless access points, and 40 removable hard drives of 40 GB capacity.

PC laboratory with removable hard drives - already existing resource.

One lecturer and tutor for each tutorial or lab group of up to 20 students

• Software Title:
• Vendor:
• Version:
• OS: MS Windows XP ( ) and LINUX ( )
• License Details: (A valid software license certificate/s or Vendor permission must be available upon request if the software is to be installed for teaching)
• Are we currently licensed: Yes ( ) or No ( ) (If unsure, please check with your local IT support )
• If (Yes), who is the contact person for this software?:
• If (No), will the software license be arranged by: Staff member requesting the software ( ) or Technical Services* ( ) ? *If the latter is selected, please discuss your requirement/s with myself ASAP, prior to finalising your request, as there could be financial or resourcing implications.
• Is the software to be installed and accessed from a: Client/Workstation ( ), or Server ( ) ?
• Type of license: Site License ( ), Freeware ( ), FOSS (Free and Open Source Software) ( ), Shareware ( ), Lab based ( ) # of Licenses needed ____
• In what week will you commence using the software in class? Semester 1 (Week ___ ) and/or Semester 2 (Week ___ ):
• Nominated Staff For Acceptance Testing Software: (Name) (Phone) (Email)
• Additional Information: Special Requirements, Software Configuration/Installation Requirements, etc:

Linux 8 (Redhat) or later version and Microsoft Windows - already available.

100% Caulfield School of IT

None

None

None

CPE5002-Introduction to Network Security or equivalent