Faculty of Science, Engineering and Built Environment
SIT182 Real World Practices for Cyber Security Deakin University Unit Guide Trimester 1, 2021
CONTENTS
WELCOME ……………………………………………………………………………………………………………………………………………………… 2 WHO IS THE UNIT TEAM? ………………………………………………………………………………………………………………………………… 2 Unit chair: leads the teaching team and is responsible for overall delivery of this unit ……………………………………… 2 Unit chair details ……………………………………………………………………………………………………………………………………… 2 Other members of the team and how to contact them …………………………………………………………………………………. 3 Administrative queries ……………………………………………………………………………………………………………………………… 3 ABOUT THIS UNIT …………………………………………………………………………………………………………………………………………… 3 Unit development in response to student feedback ……………………………………………………………………………………… 3 Your course and Deakin’s Graduate Learning Outcomes ……………………………………………………………………………….. 4 Your Unit Learning Outcomes ……………………………………………………………………………………………………………………. 4 ASSESSING YOUR ACHIEVEMENT OF THE UNIT LEARNING OUTCOMES ………………………………………………………………… 5 Hurdle requirements ………………………………………………………………………………………………………………………………… 5 Summative assessments …………………………………………………………………………………………………………………………… 6 – Summative assessment task 1 …………………………………………………………………………………………………………………. 6 – Summative assessment task 2 …………………………………………………………………………………………………………………. 8 Your learning experiences in this Unit – and your expected commitment ………………………………………………………… 8 Scheduled learning activities – campus ……………………………………………………………………………………………………….. 9 Scheduled learning activities – cloud …………………………………………………………………………………………………………… 9 Note (on-campus learning activities) ………………………………………………………………………………………………………….. 9 Note ……………………………………………………………………………………………………………………………………………………….. 9 UNIT LEARNING RESOURCES ……………………………………………………………………………………………………………………………. 9 Essential learning resources …………………………………………………………………………………………………………………….. 10 Recommended learning resources …………………………………………………………………………………………………………… 10 KEY DATES FOR THIS TRIMESTER ……………………………………………………………………………………………………………………. 10 UNIT WEEKLY ACTIVITIES ………………………………………………………………………………………………………………………………. 10
26 February 2021
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
WELCOME
On behalf of the team behind SIT182, it is my pleasure to welcome you to SIT182 Real World Practices for Cyber Security.
SIT182 is known as the “gatekeeper” of the Bachelor of Cyber Security. It is designed in consultation with leading academic and industry experts to give the first-year students a taste of the adventure that awaits them in Bachelor of Cyber Security. If you are taking this unit as elective, buckle up, it will hopefully be a challenging but fun experience for you too.
In this unit, you will learn the concepts and get a feel of the ever-important domain of Cyber Security. We will cover theory, but our focus is always hands-on knowledge. After all, you are the future lifeguards of the cyber world. The content covered may be challenging for some and more comfortable for others. For some, the depth of what is covered may not be convincing. For others, they may need a bit more self-study to meet the learning outcomes.
Remember that, in this unit, our goal is to prepare a cohort that has an understanding of the basic concepts and technologies. You should be then ready to progress easier through your degree, and excel in the more challenging units such as SIT379. We will use a range of tools and focus on learning-by-doing. In this unit, you are in the driver seat of your learning and our aim is to have an engaging and collaborative community across all the three campuses (Burwood, Geelong, and Cloud). A dedicated team of experts is here to support you throughout the SIT182 journey. We will go through it all together. That’s our promise.
The SIT182 website can be accessed via the unit site (accessed in DeakinSync). Your first task should be to familiarise yourself with the site. Because the site is a dynamic one, its content will change as we progress through the trimester. You will need to check the site regularly. This Unit Guide available from the home page contains all information about SIT182. You should read this guide first and use it as a reference throughout the trimester.
Dr Arash Shaghaghi Unit Chair.
This Unit Guide provides you with the key information about this Unit. For the best chance of success, you should read it very carefully and refer to it frequently throughout the trimester. Your Unit site (accessed in DeakinSync) also provides information about your rights and responsibilities. We will assume you have read this before the Unit commences, and we expect you to refer to it throughout the trimester.
Due to the coronavirus (COVID-19) situation, you may be learning in a way that is new to you. We appreciate your flexibility and dedication to learning. For a range of helpful services and resources, please go to study support https://www.deakin.edu.au/students/studying/study-support.
WHO IS THE UNIT TEAM?
Unit chair: leads the teaching team and is responsible for overall delivery of this unit Arash Shaghaghi
Unit chair details
Campus:
Email: Phone:
Melbourne Burwood Campus 221 Burwood Highway BURWOOD VIC 3125
a.shaghaghi@deakin.edu.au
+61 3 924 45769
26 February 2021
Page 2 of 11
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
Other members of the team and how to contact them
Unit Chair, Melbourne Burwood Campus Leader and Cloud Campus Leader: contact the campus leader for assistance at
your campus
Name: Dr. Arash Shaghaghi
Email: a.shaghaghi@deakin.edu.au Phone: +61 3 924 45769
Geelong Waurn Ponds Campus Leader and Cloud Campus Leader: contact the campus leader for assistance at your campus
Name:
Campus: Email: Phone:
Prof. Chang-tsun Li,
Geelong Waurn Ponds
changtsun.li@deakin.edu.au
+61 3 522 73559
Administrative queries
● Contact your Unit Chair or Campus Leader
● Drop in or contact Student Central to speak with a Student Adviser
For additional support information, please see the Rights and Responsibilities section under ‘Content’ in your unit site.
ABOUT THIS UNIT
In SIT182 students will learn the real world practices of cyber security by solving problems based on realistic case studies. Students will explore fundamental concepts of risks in managing communication networks and choose the appropriate means to manage these risks. The unit enables students to understand threats and vulnerabilities in the context of how systems can be compromised and how we can prevent harm to systems. There will be a practical focus on how we can detect and respond to cyber attacks. The key to learning will be introducing students to practices through case studies.
Unit development in response to student feedback
Every trimester, we ask students to tell us, through eVALUate, what helped and hindered their learning in each Unit. You are strongly encouraged to provide constructive feedback for this Unit when eVALUate opens (you will be emailed a link).
In previous versions of this unit, students have told us that these aspects of the Unit have helped them to achieve the learning outcomes:
● Increased hands-on activities.
They have also made suggestions for improvement, and so this is what we have done:
● The unit was developed from scratch in 2020 with up-to-date content and hands-on activities. The unit re-development was done in-consultation with leading academics, industry experts, and course leadership.
● Adoption of OnTrack and focus on hands-on activities. Weekly tasks with extended deadlines are now used.
26 February 2021 Page 3 of 11
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
● Short training videos are now integrated into the unit and accessible on the unit site.
If you have any concerns about the Unit during the trimester, please contact the unit teaching team – preferably early in the trimester – so we can discuss your concerns, and make adjustments, if appropriate.
Your course and Deakin’s Graduate Learning Outcomes
GLO1 Discipline-specific appropriate to the level of study related to a discipline or profession knowledge and
capabilities:
GLO2 Communication:
GLO3 Digital literacy:
GLO4 Critical thinking:
GLO5 Problem solving:
GLO6 Self-management:
GLO7 Teamwork:
GLO8 Global citizenship:
using oral, written and interpersonal communication to inform, motivate and effect change
using technologies to find, use and disseminate information
evaluating information using critical and analytical thinking and judgment
creating solutions to authentic (real world and ill-defined) problems
working and learning independently, and taking responsibility for personal actions
working and learning with others from different disciplines and backgrounds
engaging ethically and productively in the professional context and with diverse communities and cultures in a global context
Each Deakin course has course learning outcomes which explain what the Deakin Learning Outcomes mean in your discipline. Learning in each unit builds towards the course learning outcomes.
Your Unit Learning Outcomes
Each Unit in your course is a building block towards these Graduate Learning Outcomes – not all Units develop and assess every Graduate Learning Outcome (GLO).
These are the Learning Outcomes (ULO) for this Unit
At the completion of this Unit successful students can:
Deakin Graduate Learning Outcomes
ULO1
Explain and implement approaches to computer security including monitoring, access control, identity verification and authentication in order to minimize the impact of cyber attacks on a system.
GLO1: Discipline-specific knowledge and capabilities
ULO2
Assess the impact of different attacks against organisations and analyse the effectiveness of its countermeasures.
GLO1: Discipline-specific
knowledge and capabilities GLO5: Problem solving
ULO3
Describe modern approaches to cryptography and explain how these are applied to secure networks.
GLO1: Discipline-specific
knowledge and capabilities GLO3: Digital Literacy
ULO4
Select and use cyber security tools to protect and attack computer systems in a professional manner.
GLO1: Discipline-specific
knowledge and capabilities GLO4: Critical thinking GLO5: Problem solving GLO8: Global citizenship
These Unit Learning Outcomes are applicable for all teaching periods throughout the year
26 February 2021 Page 4 of 11
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
ASSESSING YOUR ACHIEVEMENT OF THE UNIT LEARNING OUTCOMES
Hurdle requirements
To be eligible to obtain a pass in this unit, students must meet certain milestones as part of the portfolio and must achieve a passing grade in the examination.
Brief summary of the hurdle requirements
Rationale
1. Unit Task Discussions
Students should aim to submit tasks by their indicated due dates (S). This will ensure there is sufficient time to collaborate with their tutor to resolve any issues identified and discuss their understanding of associated concepts before the deadline. Students must ensure that each task is signed off as complete before the task deadline (D). Tasks submitted after the deadline will not be marked as Complete.
Task discussions must be conducted in the practical class (for campus student) or via OnTrack discussions (for Cloud students only). Please ensure that you are enrolled in the correct mode of study.
The pass tasks in this unit provide students the opportunity to develop and demonstrate achievement of the Unit Learning Outcomes at the minimum expected standards. These tasks are included as hurdle requirements so that students are able to provide evidence of achievement of these ULOs through their portfolio. The portfolio artefact that they submit is used to measure their performance against the minimum standards as well as their ability to justify the outcomes that they have achieved through self- assessment and reflection. The hurdle requirement also provides a mechanism for student-staff interaction to check progress and address educational and motivational issues before it is too late in the trimester.
Weeks
1
2
3
4
5
6
7
8
9
10
11
Pass Tasks
1.xP
S
D
2.xP
S
D
3.xP
S
D
4.xP
S
D
5.xP
S
D
6.xP
S
D
7.xP
S
D
8.xP
S
D
9.xP
S
D
10.xP
S
D
The following timelines will apply to Pass tasks (shown visually below):
• S indicates the submission week – For example, 5.1P should be submitted before the end of week 5.
• D indicates the completion deadline – for example, 5.1P must be signed off as Complete before the end of week 9.
For higher grades, all essential Pass Tasks must be complete, and additional Credit, Distinction, and High Distinction tasks are also required. Each of these tasks will have an indicate submission date, and discussion must be complete within 2 weeks of submission and before the end of week 11 (whichever is shorter).
26 February 2021
Page 5 of 11
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
2. Examination
The exam will consist of multiple sections, with Section A requiring students to demonstrate acceptable achievement of all unit learning outcomes. Students who are unable to demonstrate an acceptable level of achievement of all unit learning outcomes in Section A will not be awarded a passing grade for the examination.
Section A will involve: Describe the basics of:
• Access control, identity verification and authentication
• Cryptography (public key, symmetric key, PKI)Network stack and network security
• Operating system security
• Analyse attack and defense scenarios for effectiveness
• Analyse security tool usage for different scenarios
Other sections of the examination will provide challenge questions to demonstrate a higher standard of achievement of learning outcomes. Students do not need to attempt these sections, and answers provided in these sections will not be assessed if Section A does not demonstrate achievement of minimum standards for the unit.
Students must receive a passing grade on the Examination in order to pass the unit.
This hurdle requirement is to authenticate student learning and support academic integrity in the unit.
Summative assessments
(tasks that will be graded or marked)
Deakin has a universal assessment submission time of 8 pm AEDT/AEST. A late penalty will apply to assessments submitted after 11.59 pm AEDT/AEST.
NOTE: It is your responsibility to keep a backup copy of every assignment where it is possible (eg written/digital reports, essays, videos, images). In the unusual event that one of your assignments is misplaced, you will need to submit the backup copy. Any work you submit may be checked by electronic or other means for the purposes of detecting collusion and/or plagiarism.
When you are required to submit an assignment through your unit site (accessed in DeakinSync), you should receive an email to your Deakin email address confirming that it has been submitted. You should check that you can see your assignment in the Submissions view of the Assignment folder after upload, and check for, and keep, the email receipt for the submission.
– Summative assessment task 1
Please note that SIT182 uses OnTrack for the weekly assignments. All students are expected to follow instructions made available on the unit site on how to access OnTrack and submit their weekly tasks.
Learning Portfolio
Brief description of assessment task
In this unit, assessment is designed to encourage and reward you for demonstrating achievement of the unit learning outcomes; with higher grades representing better achievement of these outcomes.
26 February 2021 Page 6 of 11
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
We will be using OnTrack, which is a web application designed specifically to support your completion of learning and assessment activities. Working regularly and completing the tasks on time will help you collect evidence for your portfolio. Your portfolio will consist of work that you complete in response to the unit’s tasks.
These tasks are designed to help you learn, and demonstrate achievement of the unit learning outcomes. Tasks will consist of the following kinds of activities:
• Creating virtual machines
• Carrying out basic networking tasks
• Running penetration tests
• Creating and analysing cryptographic keys
• Analysing password entropy
• Creating scripts
• Exploring advanced usage of unix based operating systems
Detail of student output
You will work through a number of tasks throughout this unit and produce a range of artefacts including scripts, trained machine learning models, simulated network attack datasets, and a report on privacy protection in analytics. This work will be combined together with your own critique and reflections on your learning performance into your learning portfolio for assessment.
Grading and weighting
(% total mark for unit)
80%, marked and graded
Each task in the unit is associated with a grade: either Pass, Credit, Distinction, or High Distinction. Complete all the Pass Tasks for a result between 40 and 49. Complete all the Pass and Credit tasks for a result between 50 and 59, complete all the Pass, Credit, and Distinction tasks for a result between 60 and 69, and complete all Pass, Credit, Distinction and High Distinction tasks for a result between 70 and 80. Ontrack lets you select a target grade, and will show you only the tasks you need to complete in order to achieve that grade.
This task assesses your achievement of these Unit Learning Outcome(s)
ULO1 Describe approaches to computer security including access control, identity verification and authentication in order to minimize the cyber- attacks on a system.
ULO2 Assess the impact of attacks against organisations and analyse the effectiveness of its countermeasures
ULO3 Improve the level of security of systems with remote control by using proper access control, authentication, privilege management and encryption methods.
ULO4 Apply the appropriate use of tools to facilitate network security to prevent various types of computer and network attacks, and malicious software that exists
This task assesses your achievement of these Graduate Learning Outcome(s)
GLO1 through the assessment of student knowledge of IT security and
attacks to real-world systems connected to networks
GLO3 through the engagement with technical documentation associated with tools used
GLO4 through the assessment of student ability to critically analyse information to propose feasible solutions
GLO5 through the assessment of student ability to use available IT techniques to protect computer and network systems.
GLO8 through understanding responsibilities for appropriate use of ethical hacking tools
How and when you will receive feedback on your work
You will be required to work on and submit tasks for formative feedback each week. The teaching team will then review your progress and provide you with individual feedback to assist you in completing the tasks and achieving your target grade for the unit.
26 February 2021 Page 7 of 11
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
When and how to submit your work
At the end of the unit you will use OnTrack to combine together the artefacts you have created and a learning summary report into a single portfolio for assessment. This will be due by the end of Week 12, Friday 4 June 2021, 8:00 pm (AEST).
– Summative assessment task 2
Examination (online)
Brief description of assessment task
This scheduled released online examination will assess student knowledge of cyber security. Students must demonstrate an ability to relate, analyse and respond to questions around cyber security concepts and applications under examination conditions.
Detail of student output
This is an individual assessment task. Students will be required to complete an online timed released open-book exam of 2 hours duration.
Grading and weighting
(% total mark for unit)
20% – marked
This task assesses your achievement of these Unit Learning Outcome(s)
ULO1 Describe approaches to computer security including access control, identity verification and authentication in order to minimize the cyber-attacks on a system.
ULO2 Assess the impact of social engineering attacks to various organisations and analyse the effectiveness of its countermeasures
ULO3 Improve the level of security of systems with remote control by using proper access control, authentication, privilege management and encryption methods.
ULO4 Apply the appropriate use of tools to facilitate network security to prevent various types of computer and network attacks, and malicious software that exists
This task assesses your achievement of these Graduate Learning Outcome(s)
GLO1 through assessment of student knowledge of cyber security, the concepts of cyber security and its models, as well as the methodologies that can be used to manage security threats and risks that are related to computer and network systems.
GLO4 through the assessment of student ability to critically analyse information to propose feasible solutions
GLO5 through the assessment of student ability to use available IT techniques to protect computer and network systems.
How and when you will receive feedback on your work
Ongoing feedback is provided to students following weekly practical classes. Students are also required to undertake a guided book reading underpinning modern cyber security. Students are advised to read extensively on the latest news feeds about cyber security cases. Feedback and student reflection on these activities will be relevant for enhanced student performance in the examination.
When and how to submit your work
Students will be required to undertake a timed online assessment during the examination period. It is the responsibility of students to review their examination timetable when it is released via DeakinSync.
Your learning experiences in this Unit – and your expected commitment
To be successful in this unit, you must:
● Read all materials in preparation for your classes or seminars, and follow up each with further study and research on the topic;
● Start your assessment tasks well ahead of the due date;
26 February 2021 Page 8 of 11
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
● Read or listen to all feedback carefully, and use it in your future work;
● Attend and engage in all timetabled learning experiences as follows:
Scheduled learning activities – campus
2 x 1 hour class per week, 1 x 2 hour practical per week.
Scheduled learning activities – cloud
1 x 1 hour scheduled online workshop per week.
Note (on-campus learning activities)
Teaching will be delivered in line with the COVIDSafe health guidelines. All classes will be delivered online but other activities may include a combination of online and on-campus activities. Please refer to the details provided below, and check your unit site for announcements and updates.
Students will on average spend 150 hours over the trimester undertaking learning and assessment activities for this unit. For campus students this includes class time as described, designated activities in the practical sessions, assessment tasks, readings and study time. For cloud students the time should be divided between online learning activities, discussion boards, designated activities in the practical sessions, assessment tasks, readings and study time.
Campus enrolled students have the opportunity to attend the cyber security lab. This applies to both Burwood and Geelong students. However, this is optional. A list of pracs are available for students to choose from during enrollment. If a student intends to attend on-campus pracs, s/he must be registered for one of the on-campus pracs in the respective trimester.
The learning environment for the unit is the unit site accessed in DeakinSync. Resources for the unit are hosted in the unit site. The resources include class notes, class recordings, discussion and assignments.
Note
At Deakin,
● Lectures are referred to as classes (definition: a general meeting for all students, for which students do not need to register and where students are engaged through presentations and learning activities)
● Tutorials, workshops and seminars are referred to as seminars (definition: more interactive meetings for smaller groups of students).
● For the complete list of agreed definitions for learning experiences, see the Course Design and Delivery Procedure.
UNIT LEARNING RESOURCES
Your unit learning resources are available in your unit site accessed in DeakinSync.
There is no prescribed text.
The texts and reading list for the unit can be found on the University Library via the link below: SIT182 Note: Select the relevant trimester reading list. Please note that a future teaching period’s reading list may not be available until a month prior to the start of that teaching period so you may wish to use the relevant trimester’s prior year reading list as a guide
26 February 2021 Page 9 of 11
Essential learning resources
Student Equipment Purchases
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
only.
Learning experiences and assessment activities in this unit may require that students have access to specific computing equipment such as external wireless adapters capable of injecting packets (to the approximate value of $100). This equipment will also be usable in subsequent units of the course. If purchases were required, students will be informed in the first few weeks of the lectures.
Recommended learning resources
Suitable reference books for this unit will be available from the Deakin library. Further details will be provided on the unit site.
It is not mandatory for students to have a copy of the references books, and no assessment will be based on their content alone. However, some students may find the alternative explanations offered by the texts useful.
KEY DATES FOR THIS TRIMESTER
Trimester begins (classes begin)
Intra-trimester break (a short break during trimester)
Trimester ends (classes cease)
Study period (examination preparation period)
Examinations begin
Examinations end
Inter-trimester break (the period between trimesters)
Unit results released
UNIT WEEKLY ACTIVITIES
Monday 8 March 2021
Friday 2 April – Sunday 11 April 2021
Friday 28 May 2021
Monday 31 May – Friday 4 June 2021
Monday 7 June 2021
Friday 18 June 2021
Monday 21 June – Friday 9 July 2021
Thursday 8 July 2021 (6pm)
Please note that there are no pracs in Week 1. However, lecture/class will start in Week 1 as per the timetable.
Week
Commencing
Chapter in Text
Topic
Assessment
activity
1#
8 March 2021
1
Understanding “Cybersecurity”
Submit week 1 tasks
2
15 March
2
Malware
Submit week 2 tasks
3
22 March
2
Access Control
Submit week 3 tasks
4^
29 March
3
Network Security – Part 1
Submit week 4 tasks
26 February 2021
Page 10 of 11
#Victorian Labour Day public holiday: Monday 8 March – University open
^Easter vacation/intra-trimester break: Friday 2 April – Sunday 11 April 2021 (between weeks 4 and 5) *ANZAC Day observed, Monday 26 April (in lieu of 25 April) – University closed
Deakin University, Faculty of Science, Engineering and Built Environment SIT182 Real World Practices for Cyber Security – Trimester 1, 2021
5
12 April
3
Network Security – Part2
Submit week 5 tasks
6
19 April
4
Intrusion Detection and Prevention Systems
Submit week 6 tasks
7*
26 April
4
Cryptography – Part 1
Submit week 7 tasks
8
3 May
5
Cryptography – Part 2 and Online Privacy
Submit week 8 tasks
9
10 May
5
Wireless Network Security
Submit week 9 tasks
10
17 May
6
Guest Lectures
Submit week 10 tasks
11
24 May
Unit Revision and Review
Finalize any outstanding task
12 (Study Period)
31 May
Learning Portfolio
26 February 2021 Page 11 of 11