This unit is designed to provide students with an understanding and appreciation of a range of information systems security components, principles, policies, and strategies. Information system security philosophies are discussed along with methods, models, standards, techniques and controls, including risk management and risk analysis, qualitative and quantitative matrices, access controls: such as single sign on, passwords, smart cards, etc and the role of security auditing. Information system security is especially considered in the area of Internet security and policy; and from the standpoint of ethical, legal and privacy issues in Australian organisations that maintain databases of personal information. Information system security current issues and future trends are also discussed.

2005: Existing unit IMS3110 Information Systems Security is updated to complement the new BITS degree structure where it plays a major role in the Security and Information Systems majors and is an elective in the Systems Development major. The new FIT unit code depicts this role.

FIT3065 Information Systems Security is an elective 3rd level unit in the Caulfied BITS major in Systems Development and is a major unit in the Security and Information systems majors.

This unit provides students with a comprehensive and important overview of security from an information systems perspective. Although FIT3065 has some similarities to FIT3018 Network Security, it provides the security knowledge which is imperative for students interested in security from an information systems perspective and who want to take their knowledge further by enrolling in a unit which has as its primary focus network security.

This unit is a member of a group of electives in the Systems Development major of the Bachelor of Information Technology and Systems and plays a major supporting role in the Security and Information Systems Majors. The current industry focus is on Security within systems development and information systems making this an important industry and pedagogical unit.

• Current security philosophies, security methodologies, security analysis and design methods and techniques, information system security management, and professional ethics.
• The ethical, legal, privacy and criminal issues relating to the security of information systems.

Demonstrate ethically sound viewpoints with respect to the protection of information resources in regard to maintaining a secure IS framework; in relation to confidentiality, integrity, availability and extended framework to include: accountability, non-repudiation and authenticity, in the professional development of information systems.

Apply security analysis and design methods and techniques in the analysis of threats, risks, vulnerabilities and breaches to an information system, and in the design of suitable security control measures to include: control relational model and defence in depth strategies to mitigate against risks.

ASCED Discipline Group classification: 029901 Security science

This unit will review information system security components, principles and issues. It will consider different types of threats, including hackers, viruses, identity fraud and these will be linked to computer crime. Information system security philosophies, methods, models, techniques, standards and controls, including risk management and risk analysis, access matrices, single sign on, passwords, smart cards, and security auditing. Information system security will be considered for different applications. Ethical, legal and privacy issues in Australian organisations are discussed. Information system security management and policy will include: ISO17799 as well as introduction to Sarbanes Oxley Act. Internet security management and policy are linked throughout the unit presentation and the unit will evaluate information system security issues current and future.

This unit reviews information system security components, principles and issues. It identifies various threats, including hackers, viruses, and identity fraud and computer crime. IS security philosophies, methods, models, techniques, standards and controls, such as access matrices, single sign on, passwords, smart cards, and security auditing will be considered for different applications. Ethical, legal and Australian privacy laws are discussed. IS security management and policy will include: ISO17799 as well as introduction to Sarbanes Oxley Act. Internet security management and policy are linked throughout the unit presentation and current and future trends will be evaluated.

• Ciampa, M. (2005) Security+ Guide to Network Security Fundamentals (2nd Ed.). Boston, Massachusetts: Thomson Technology.
• Erbschloe, M. (2003) Guide to Disaster Recovery. Boston, Massachusetts: Thomson Technology.
• Maiwald, E. (2004) Fundamentals of Network Security. New York: McGraw-Hill.
• Palmer, M. (2004) Guide to Operating Systems Security. Boston, Massachusetts: Thomson Technology.
• Panko, R.R. (2004) Corporate Computer and Network Security. New Jersey: Pearson Education International.
• Quirk, P. and Forder, J. (2003) Electronic Commerce and the Law (2nd Ed.). Singapore: John Wiley & Sons Australia, Ltd.
• Whiteman, M.E. & Mattord, H.J. (2005) Principles of Information Security (2nd Ed.). Boston, Massachusetts: Thomson Technology.

On campus

2 hour lecture plus one hour tutorial per week

Knowledge and understanding objectives are achieved mainly through lectures and tutorial exercises.

Attitudes and beliefs objectives are achieved mainly through laboratory exercises and assignment work.

Practical skills objectives are achieved mainly through laboratory exercises and assignment work.

Relationships, communication and team work objectives are achieved mainly through laboratory exercises, presentations and assignment work.

Examination: 60% + Practical work: 40%

Knowledge and understanding objectives are assessed mainly through the examination.

Attitudes, values and belief objectives are assessed mainly through the examination and assignment work.

Practical skills objectives are assessed mainly through assignment work.

Relationships, communication and team work objectives are assessed mainly through assignment work.

12 hours per week including lectures, laboratory sessions and private study.

High-tech lecture theatre with data display and internet connection, with a PC and facility to plug in a laptop, for two hours per week throughout the semester.

Laboratory equipped with the Standard Operating Environment.

One lecturer per semester. One tutor per laboratory session per semester.

Adequate copies of at least the recommended texts listed above.

FIT

Nil

Nil

Nil

Nil

FIT2001, CSE1205, FIT1003, or equivalent