Course Title: Manage network security
Status: Published
Part B: Course Detail
Teaching Period
Sem 1 2006
Course Code
ISYS7060C
Course Id
035248
Course Title
Manage network security
School
Business TAFE
Campus
City
Program Code
C5148
Program Title
Diploma of Information Technology
Class Number
1526
Teacher Guided Hours
40
Learner Directed Hours 40
Additional Staff Contact Details
David Bell, +61 3 9925 1610, david.bell@rmit.edu.au
Pre-requisites and Co-requisites
Successful completion of COSC5675C – Install and configure a network (National Code ICAITI097B) and
COSC5107C – Install network hardware to a network (National Code ICAITS029B).
This course is taught in conjunction with Class Number 1525, COSC5754C – Develop system infrastructure design
plan (National Code ICAITD044B).
Course Description
This competency purports to develop student’s skills in dealing with the threats facing the computing environments
of today. This competency intends to enable students to successfully determine various threats to a networking
system, identify appropriate controls, develop and implement adequate procedures ensuring availability of the
system, security and the integrity of data. This competency also introduces students to the need of continuously
reviewing their existing security mechanism so that computing network under their administration remains stronger
against the emerging threats.
Learning Activities
Students will study Security Implementation skills and theory in laboratory sessions, tutorials, and practical
sessions through prescribed exercises and assessment work. These concepts will also be explored through the
investigation of appropriate real world and simulated environments.
Teaching Schedule
This course is taught in conjunction with Class Number 1526, ISYS7060C – Manage Network Security (National
Code ICAIS123B) and this schedule includes both courses.
Week beginning
and topic
covered
Multi group Lecture and
Tutorial
(2 hour)
Single group Practical
(2 hours)
Week 1
Course
Introduction
Course Introduction
No practical
Week 2
Researching
client
requirements
What is a network
What is security
OSI and TCP/IP Models
Fundamentals of N/W security
Organisational analysis
Documentation of
network and security
plan
Assessment and
Tutorial tasks
Including
Competencies
assessed (where
multiple
competencies)
Hand out case study
containing eight written
(8) tasks
Design a secure
Chapter1-4
Top Down Network
Design Chapter 1,2,14
Element D1.1
network for Melbourne
Online training company
scenario.
Design Issues
Designing a network
Identification, selection and
evaluation of hardware/software
vendors
Fundamentals of N/W security
Chapter 2,3,18
Top Down Network Design
Chapter 4, 5
Element D3
Researching Hardware
and security
requirements for
scenario with teacher
Top Down Network
Design Chapter 3,4
Virtual ICT Project
Project requirement
Interviews
Week 4
Introduction to
Cisco routers
Introduction to Cisco routers
Cisco CCNA 2 Companion Guide
Chapters 2,3,5,6
Introduction to Cisco
Router programming
Task 1 due
Documentation of client
network and security
requirements
Element D1.1
Week 5
Wireless
Wireless design and security
overview
Fundamentals of N/W security
Chapter 20
Cisco Router
programming
Protocol selection
Top Down Network
Design Chapter 7
CCNA 2 Chapter 6
Task 2 due
Documentation of client
hardware and software
requirements.
Element D1.2 - .3
Included in
documentation network
vendor hardware and
software
recommendations
Element D3
For Virtual ICT Project
Week 6
Risk assessment
and auditing
Risk assessment
Identify & establish the security
perimeter
Audit trails
Fundamentals of N/W security
Chapter7, 8
Implementing security
controls
Developing ACLs
CCNA 2 Chapter 11
Week 7
IP Addressing
IP addressing
Top Down Network Design
Chapter 6
Implementing security
controls
Implementing ACLs
Week 8
Subnetting
IP Addressing subnetting
Week 3
Architecture
design
requirements and
Vendor
evaluation
Element D1.2 - .3
Task 3 due
Documentation of risk
assessment for client
Element S1.1
Practical Task 4
IP addressing exercises
Element D1.4
Implementation of ACLs
demonstration
Element S5.3, 5.5
Week 9
Linux
Installation of Linux Server
Fundamentals of N/W security
Chapter 15
Review Linux Server
Identify security
advantages /
disadvantages
Week 10
Authentication
and Encryption
Authentication methods
Encryption methods
User controls
Fundamentals of N/W security
Chapter 12
Linux Server
Task 5 due
Documentation of
suggested IP
addressing scheme and
topology model
Element D1.4
Week 11
Best Practice and
policies
Security + Chapter 11
Information security best practice
Policies and Disaster recovery
Fundamentals of N/W security
Chapter 6, 8, 9
Element S1.2-.3 Element S2
Linux Server
Week 12
Security
technologies
Security technologies
Firewalls
VLANs
VPNs
IDS
Fundamentals of N/W security
Chapter11, 13
Element S3
Review MS Server 2003
Identify security
advantages /
disadvantages
Element S1.1
Fundamentals of N/W
security Chapter 17
Task 8 due
Documentation of
security and audit
policies for client
Element S1.2-.3
Element S2
Week 13
Firewalls
Placement of firewalls in network
Firewall evaluation and selection
Fundamentals of N/W security
Chapter 10
Element S5.1-.2
Administering TCP/IP
DHCP
Windows Server 2003
Chapter 8
Routing
Windows Server 2003
Chapter 11
Virtual ICT Project
Identification and
documentation of project
server requirements
Week 14
Documentation
Using templates to complete
documentation to business
requirements
Top Down Network Design
Chapter 14
Installation
DNS / WINS
IP Security and Remote
Access
Windows 2003 Server
Chapter 9,11
Installation of
authentication methods
Installation of encryption
methods and certificates
Windows Server 2003
Chapter 5
Task 9 due
Document firewall
recommendations for
client network
Element S5.1-.2
Week 15
Task 7
Practical demonstration
of Linux
Element S3, 4
Deliver final copy of assignment
in required template format
Task 6 due
Documentation of
selection criteria for
authentication and
encryption methods
Element S3
Virtual ICT Project
Project server
installation and
configration
Practical Task 10
Windows 2003
Implementing firewall
security controls
Element S 4
Network Design and Security
documentation, including
resubmits
Task11 due
Individual work journals
Week 16
Revision
Practical Task 2
Installation Retest
RMIT Examinations
Final Theory test
All Elements covered for RMIT AMS grade > 50
Learning Resources
Prescribed Text
Fundamentals of Network Security: Maiwald E., McGrawHill Technology Education. ISBN 0-0722-3093-2
Top Down Network Design, 2nd ed.: Oppenheimer P., Ciscopress. ISBN 9-781587-051524
Security+ Guide to Network Security Fundamentals, 2nd ed.: Ciampa M., Thomson Course Technology. ISBN 0619-21566-6
Guide to Designing and Implementing Local and Wide Area Networks: Palmer M.and Sinclar R, Thomson Course
Technology. ISBN 0-619-12122-x
CCNA 1 & 2 Cisco Companion Guide 3rd ed. Revised: Ciscopress. ISBN 1-58713-150-1
Hands-On Microsoft Windows Server 2003 Administration: DiNicolo D. Thomson Course Technology. ISBN 0-61918611-9
Assessment Tasks
This course is taught in conjunction with Class Number 1526, ISYS7060C – Manage Network Security (National
Code ICAIS123B) and the list of Assessment Tasks covers both courses.
Task 1
Due week starting 6/3/2006
Documentation of client network and security requirements
Task 2
Due week starting 13/3/2006
Documentation of client hardware and software requirements
Task 3
Due week starting 27/3/2006
Document of risk assessment for client
Task 4
Due week starting 3/4/2006
Practical demonstration task
Implementing ACLs on Cisco routers
Task 5
Due week starting 10/4/2006
Document of suggested IP addressing scheme and topology model based on client requirements
Task 6
Due week starting 1/5/2006
Document the selection criteria for authentication and encryption methods
Task 7
Due week starting 1/5/2006
Practical demonstration task
Linux
Task 8
Due week starting 8/5/2006
Document security and audit policies for client
Task 9
Due week starting 22/5/2006
Documentation of firewall recommendations for client
Task 10
Due week starting 29/5/2006
Practical demonstration task
Windows 2003 Security
Task 11
Due week starting 5/6/2006
Presentation of individual work journals (Collation of the semesters written tasks in required format)
Marking scheme
Each of the 8 written tasks and 1 practical demonstration will be assessed on a scale of 0 (not submitted) to 2
(covers all the requirements of the task displaying a high level of understanding), giving the students a mark out of
16.
A mark of 1 or more out of 2, indicates competency achieved for the task.
The 3 practical demonstrations will be assessed on a scale of 0 to 15, giving each student a total possible practical
mark of 34
Resubmits for written tasks, only available to students who have previously submitted NYC task(s) or have a
successful special consideration request. All resubmits will be included as part of the final documentation in Task
11
Exam
The exam will cover all competencies and their associated elements and are for RMIT grading purposes only.
The exam will be a mark out of 50. This will be added to the semester mark out of 50 to give the student the final
AMS mark out of 100.
There will be NO resits or resubmits for the final practical or theory exams, valid special consideration requests will
be considered as per RMIT policy.
Task
Maximum
Mark
Task
1
Task
2
Task
3
Task 4
ACL
Practical
Task
5
Task
6
Task 7
Linux
Practical
Task
8
Task
9
Task 10
Windows
Practical
Task
11
2
2
2
15
2
2
4
2
2
15
2
Assessment Matrix
For a student based at the RMIT BUSINESS campus in Melbourne, Australia in Semester 1, 2006 the assessment
will be:
ICAITS123B
Task Task Task Task Task Practical Practical Practical Final
Manage network
3
6
5
7
11
demo 1
demo 2
demo 3 Exam
security
Element S1.1
Yes
Yes
Yes
Element S1.2 - .4
Yes
Yes
Yes
Element S2
Yes
Yes
Yes
Element S3
Yes
Yes
Yes
Yes
Element S4
Yes
Yes
Yes
Yes
Element S5.1 - .2
Yes Yes
Yes
Element S5.3 & .5
Yes
Yes
Yes
Element S5.4
Yes
Yes
Other Relevant Information
Note: All email communication will be sent to your RMIT email address.
Essential resources
Access to an internet connected computer outside of class times – Internet connected computers are available in
the faculty of Business labs on level 3 of building 108, 259 Bourke Street Melbourne.
Homework
The student will be required to undertake research and assessment practice outside of regular class times.
Homework exercises are provided to the student to facilitate their learning in a self-paced manner and form part of
the overall achievement of the competencies in this course. Students are reminded that they are expected to
conduct an equal amount of time outside of class, research and furthering their understanding of the concepts
being taught, as they do in class to be deemed competent in this course.
Grading
Grading - What is required for a student to PASS this course
A mark Competency Achieved (CA) or Not Yet Competent (NYC) will awarded for these competency assessment
tasks.
Competent
(AMS mark 50%)
Satisfactorily complete, present all documentation required
Successfully complete the 3 practical tasks
To gain an AMS mark > 50%
Gain competency (CA) in all the above tasks
Sit final theory based exam for a mark /50 added to the semester task mark for a final %mark or 50%, whichever is
greater
The final exam will be graded only if the student has received CA for each (and all) the preceding assessment
tasks.
If a student is unable to gain competency during the semester class time and class practical tests, competency
maybe gained by sitting the final theory test to demonstrate competency in the elements that you fail to achieve the
desired level of competency in previously submitted assessment tasks.
BUT you will only gain an AMS mark of 50%, ie competent.
Grade
AMS Mark
Description
HD
> = 80
High Distinction
(Competency Achieved)
DI
70 - 79
Distinction
(Competency Achieved)
CR
60 - 69
Credit
(Competency Achieved)
PA
50 - 59
Pass
(Competency Achieved)
NN
< 50
Fail
(Not Yet Competent)
CA
Not Applicable
Competency Achieved
NYC
Not Applicable
Not Yet Competent
It is strongly recommended that students attend all sessions. Lack of attendance at any formal class may have
impact on student’s learning and possibly lead to an NYC result in this course.