The importance of Information and Network Security has been realised by universities and industries around the world. Therefore there is a need for an introduction unit to Information and Network Security. This unit is an important unit of any computing degree. It will provide students the fundamentals for further study in Information and and Network Security at universities or in industry. In the Security major the unit is co-taught as FIT2058

This unit was previously called CPE3001/CPE2007 Information and Network Security and was in the Bachelor of Network Computing. The unit has been changed to fit the faculty requirements for the Bachelor of Information Technology and Systems and also due to its importance to any modern IT degree.

SFEC 4/06: This unit will be co-taught with CSE2500(BComp) and CPE2007(BNetwork Comp) as part of the teaching-out strategy for these units.

This is a core unit in the Security major in the Bachelor of Information Technology and Systems. It is co-taught as FIT2058. It is an elective for the other BITS majors.

The unit gives the basics of computer security, fundamentals of cryptography, including OS security, Database security, Web security, Email security, etc. From here students can proceed to more advanced security subjects of the Masters degrees.

This unit is relevant to the Bachelor of Information Technology and Systems with major in Security, in that it provides students with the basics of computer security, which is one of the aspects of this major.

• Identify the threats to the security of a network computing system;

• Describe the operation of computer viruses, worms and other nuisance/destructive programs and understand the counter-measures, which can be taken to protect systems against these programs;

• Describe a range of access control policies and select appropriate mechanisms to implement each of the policies;

• Differentiate between a range of standard security techniques in terms of the security they provide and the resources required;

• Understand and assess the performance of commonly used security algorithms and protocols;

• Apply standard security techniques to information transmitted over communication lines or stored in a database in order to provide confidentiality, authenticity and integrity;

• Understand the issues involved in information and network security in wireless and mobile environments;

• Be able to assess the performance of security systems in wireless and mobile environments.

Students will at least gain practical skills in securing data, email, ftp, web services. In addition, they will be able to protect their important information, software, and communications.

ASCED Discipline Group Classification: 029901 Security science.

The aim of this subject is to provide students with the knowledge and skills necessary to identify security problems which may arise in a networked computing environment and to explore modern security technologies that may be used to prevent or resolve such security problems. The unit will cover: Fundamentals of cryptography; Security threats and counter-measures in a computing and communications system; Standard security techniques for achieving confidentiality and authenticity; Communication security; Database security; Operating system security; Wireless security; Email security; Computer viruses and Malicious codes.

• Gollmann Dieter, Computer Security, John Wiley & Sons Ltd. , 2006.

• Nichols, R. K., P. C. Lekkas, Wireless Security, McGraw-Hill, 2002.

• William Stallings, Network Security Essentials: Applications and Standards, Third Edition, Prentice-Hall, 2007.

• Pfleeger, C.P.& Pfleeger S. L., Security in Computing, (4th edition), Prentice-Hall, 2007.

• Spafford, G, S. Garfinkel and A. Schwartz, Practical UNIX & Internet Security, (3rd edition), O'Reilly & Associates, 2003.

• Kaufman, C, Perlman, R & Speciner, M, Network Security, 2nd Edition, Prentice-Hall, 2002.

The subject will have a 2 hours of lectures and 2 hours of tutorial/lab per week for one semester. The tutorial/lab works will emphasise problems/hands-on exercises in cryptography, digital signatures, wrappers, email security, ftp server protection, web server protection, production server protection, and related areas.

Networking lab or similar.

Lecturer 2 hours per week. Tutors: 2 hours per week per lab.

• Software Title:
• Vendor:
• Version:
• OS: MS Windows XP ( ) and/or LINUX ( )
• License Details: (A valid software license certificate/s or Vendor permission must be available upon request if the software is to be installed for teaching)
• Are we currently licensed: Yes ( ) or No ( ) (If unsure, please check with your local IT support )
• If (Yes), who is the contact person for this software?:
• If (No), will the software license be arranged by: Staff member requesting the software ( ) or Technical Services* ( ) ? *If the latter is selected, please discuss your requirement/s with myself ASAP, prior to finalising your request, as there could be financial or resourcing implications.
• Is the software to be installed and accessed from a: Client/Workstation ( ), or Server ( ) ?
• Type of license: Site License ( ), Freeware ( ), FOSS (Free and Open Source Software) ( ), Shareware ( ), Lab based ( ) # of Licenses needed ____
• In what week will you commence using the software in class? Semester 1 (Week ___ ) and/or Semester 2 (Week ___ ):
• Nominated Staff For Acceptance Testing Software: (Name) (Phone) (Email)
• Additional Information: Special Requirements, Software Configuration/Installation Requirements, etc:

Licence software already available.

Several copies of the recommended reading texts should be held in the library.

Faculty of Information Technology

None

None

FIT1005 or CSE2318 or CSE3318