Unit Outline

This unit provides a practical introduction to the risks and threats that computer systems and networks face, and some of the countermeasures that can be put in place to minimise them. This unit also provides an introduction to ethical hacking which is attempting to penetrate secure systems in order to demonstrate vulnerability so that steps can be taken to mitigate risk. Students will develop an understanding of some of the techniques that can be employed to evaluate the security of, and defend against threats to, computer systems and networks through physical and electronic means.

Intended Learning Outcomes

As per the Assessment and Results Policy 1.3, your results will reflect your achievement against specified learning outcomes.

On completion of this unit, you will be able to:


1.	Explain ethical hacking as it relates to cybersecurity, privacy and the law
2.	Evaluate cyber threats and risks to computer systems
3.	Penetrate specifically approved systems using ethical hacking techniques
4.	Defend against cybersecurity threats by applying appropriate countermeasures

Requisites


REQUISITE TYPE	REQUISITES
Pre-requisite	KIT501

Alterations as a result of student feedback

The 2 hour 40% end-of-semester exam has been removed, and assessment has been updated to include:

an additional assignment that requires students to individually prepare a video presentation about a recent security incident

addition of in-tutorial assessed checkpoints

addition of in-tutorial assessed quizzes

Teaching arrangements


ATTENDANCE MODE	TEACHING TYPE	LEARNING ACTIVITY	CONTACT HOURS	FREQUENCY
On Campus	Lecture (Online)	A real-time (i.e. synchronous) interactive activity involving the whole class whose primary purpose is the presentation and structuring of information/ideas/skills to facilitate student learning. All students are expected to attend.	2	Weekly
	Tutorial	Network-based hands-on activity in a networks-equipped lab. A structured real-time (i.e. synchronous) activity in a small-group setting where the primary purpose is the clarification, exploration or reinforcement of subject content presented or accessed at another time or place (e.g. lecture, preparatory work). It is reliant on student-teacher and student-student interaction and dialogue for achievement of its learning outcomes. The students enrolled in the tutorial are expected to attend.	2	Weekly
	Independent Learning	Involving reading, listening to audio, watching video, and/or completing exercises and/or quizzes, self-study is individual work undertaken when the student chooses (i.e. asynchronous), most likely through engagement with MyLO. The content is examinable, and may need to be completed prior to attending classes and/or attempting assessment tasks.	3	Weekly

Attendance / engagement expectations

If your unit is offered On campus, it is expected that you will attend all on-campus and onsite learning activities. This is to support your own learning and the development of a learning community within the unit. If you are unable to attend regularly, please discuss the situation with your course coordinator and/or our UConnect support team.

If your unit is offered Online, it is expected you will engage in all those activities as indicated in the Unit Outline, including any self-directed learning.

If you miss a learning activity for a legitimate reason (e.g., illness, carer responsibilities) teaching staff will attempt to provide alternative activities (e.g., make up readings) where it is possible.

How will I be Assessed?

For more detailed assessment information please see MyLO.

Assessment schedule


ASSESSMENT TASK #	ASSESSMENT TASK NAME	DATE DUE	WEIGHT	LINKS TO INTENDED LEARNING OUTCOMES
Assessment Task 1:	Case Study Video	Week 5	20 %	LO1
Assessment Task 2:	Vulnerability Assessment Proposal	Week 9	20 %	LO1, LO2, LO4
Assessment Task 3:	Cybersecurity Process Configuration	Refer to Assessment Description	20 %	LO1, LO2, LO3, LO4
Assessment Task 4:	Tutorial Practical Demonstrations	Refer to Assessment Description	40 %	LO1, LO3, LO4

Assessment details

Assessment Task 1: Case Study Video

Task Description:

Individuals will source a recent article outlining a recent cybersecurity incident. Students will summarise the incident and analyse against given criteria within a 3 minute video presentation.

Task Length:

3 minutes (max)

Due Date:

Week 5

Weight:

20 %

CRITERION #

CRITERION

MEASURES INTENDED

LEARNING OUTCOME(S)


1	Explain the incident within a 3 minute video	LO1
2	Analyse the incident against given criteria, suppling relevant references	LO1

Assessment Task 2: Vulnerability Assessment Proposal

Task Description:

Students are required to develop a fictitious business, based on a series of parameters that are uniquely generated for each student. They then produce a plan, formatted as a proposal to that business, to conduct a vulnerability assessment of the business's ICT infrastructure. This report must include a timeline for the plan, a set of recommendations for what is in and out of scope, and any risks that the business needs to be aware of. The student must justify all recommendations and the plan must be consistent with the business's size and infrastructure footprint.

Task Length:

~3000 words

Due Date:

Week 9

Weight:

20 %

CRITERION #

CRITERION

MEASURES INTENDED

LEARNING OUTCOME(S)


1	Quality and scope of vulnerability assessment plan matches the business's infrastructure	LO1, LO2, LO4
2	Identify and explain relevant cybersecurity, privacy and legal issues within the plan	LO1
3	Evaluate cyber threats and risks to business ICT infrastructure	LO2
4	Recommend and justify appropriate countermeasures to defend against cybersecurity threats	LO4

Assessment Task 3: Cybersecurity Process Configuration

Task Description:

This is continuous assessment that demonstrates completion and understanding of the cybersecurity tutorial tasks and the cybersecurity online content. Students must configure networking and cybersecurity infrastructure to specification, and then demonstrate a designated checkpoint in the tutorial material together with a designated quiz question on the online cybersecurity content.

Task Length:

2 hours (weekly)

Due Date:

Refer to Assessment Description

Weight:

20 %

CRITERION #

CRITERION

MEASURES INTENDED

LEARNING OUTCOME(S)


1	Configure cybersecurity and networking infrastructure and protocols to provided specifications	LO2, LO3, LO4
2	Correct completion of tutorial assessment checkpoints	LO1, LO2, LO3, LO4
3	Determine, apply and troubleshoot network device configurations for specified cybersecurity scenarios	LO2, LO3, LO4

Assessment Task 4: Tutorial Practical Demonstrations

Task Description:

These demonstrations are held during a student's regularly-scheduled tutorial in an ICT Networks Laboratory.

Demonstration 1, Defence - week 8, 20%
A practical demonstration of competency with defensive techniques in network security. Students are given multiple tasks to complete relating to defensive mechanisms such as firewalls, IDS and IPS, as covered during the preceding tutorials.

Demonstration 2, Penetration Testing - week 13, 20%
A practical demonstration of competency with networking security tasks associated with penetration testing. Students are given multiple tasks to complete relating to reconnaissance and penetration testing, as covered during the preceding tutorials.

Task Length:

45 minutes x 2

Due Date:

Refer to Assessment Description

Weight:

40 %

CRITERION #

CRITERION

MEASURES INTENDED

LEARNING OUTCOME(S)


1	Use tools to detect potential system attacks	LO3
2	Apply defensive mechanisms to systems to detect and prevent penetration	LO4
3	Explain defences and penetration testing techniques utilised	LO1

How your final result is determined

To pass this unit, you need to demonstrate your attainment of each of the Intended Learning Outcomes, achieve a final unit grade of 50% or greater, and pass any hurdle tasks.

Submission of assignments

Where practicable, assignments should be submitted to an assignment submission folder in MYLO. You must submit assignments by the due date or receive a penalty (unless an extension of time has been approved by the Unit Coordinator). Students submitting any assignment in hard copy, or because of a practicum finalisation, must attach a student cover sheet and signed declaration for the submission to be accepted for marking.

Requests for extensions

If you are unable to submit an assessment task by the due date, you should apply for an extension.

A request for an extension should first be discussed with your Unit Coordinator or teaching support team where possible. A request for an extension must be submitted by the assessment due date, except where you can provide evidence it was not possible to do so. Typically, an application for an extension will be supported by documentary evidence: however, where it is not possible for you to provide evidence please contact your Unit Coordinator.

The Unit Coordinator must notify you of the outcome of an extension request within 3 working days of receiving the request.

Late penalties

Assignments submitted after the deadline will receive a late penalty of 5% of the original available mark for each calendar day (or part day) that the assignment is late. Late submissions will not be accepted more than 10 calendar days after the due date, or after assignments have been returned to other students on a scheduled date, whichever occurs first. Further information on Late Penalties can be found on the Assessments and Results Procedure.

Review of results and appeals

You are entitled to ask for a review of the marking and grading of your assessment task if there is an irregularity in the marking standards or an error in the process for determining the outcome of an assessment. Details on how to request a review of a mark for an assignment are outlined in the Review and Appeal of Academic Decisions Procedure.