Chat with us, powered by LiveChat

Network Security 

This subject is available under ICMS undergraduate degrees, please click the button below to find an undergraduate course for you.

Subject Code:

CYB201A

Subject Type:

Specialisation 

Credit Points:

3 credit points 

Pre-requisite/Co-requisite: 

CYB101A Cyber Security Essentials 

ICT102A Network Fundamentals 

Course level of study pre-requisite: a total of 12 credit points including ICT101A, ICT102A, ICT103A and DAT101A from level 100 core subjects prior to enrolling into level 200 core and specialisation subjects. 

Subject Level:

200

Subject Rationale:

A well-modelled and securely architected computer networks ecosystem minimises the risk of falling victim to potential data breaches and damage to organisational infrastructure. Given the global interconnectivity and widespread utilisation of network services, establishing a secure network environment is essential to maximise organisational cyber resiliency. 

This subject provides students with the foundational knowledge and skills required to secure a network system, focusing on security principles from a technical perspective. Students will use contemporary security methods and technologies to monitor computer networks, detect vulnerabilities, analyse alerts, and promote ways to ensure confidentiality and availability in data communications. 

Students will explore security controls that are contextually used in an archetypal network environment to defend its ecosystem against cyberattacks. They will conduct vulnerability assessments using industry tools and techniques and enact suitable defence mechanisms to safeguard common network services in a layered architecture. Secure communication techniques, threat management practices, and authentication protocols will also be examined. 

Learning Outcomes:

a) Explain network security principles and concepts, including associated services, protocols, challenges, and applications.

b) Use network security tools and techniques to conduct vulnerability assessments and discover security issues to improve system security design.

c) Analyse security issues associated with data networks and identify solutions for resolution.

d) Detect vulnerabilities in a network environment and apply suitable countermeasures to secure services and mitigate potential threats.

e) Explain a range of network technologies including their role and usage in designing, implementing, and maintaining a secure network system.

Student Assessment:

Broad Topics to be Covered:

Topic: 
Week 1: Fundamentals of Network Security 

  • Introduction to network security solutions 
  • Security lifecycle 
  • Network scanning 
  • Network security monitoring 
Week 2: Cryptography and Encryption 

  • Ciphers and their use in cyber threats 
  • Hash functions 
  • RSA 
  • Public Key Cryptography 
  • Digital signatures 
  • Kerberos- example 
  • Digital certificates and identity 
Week 3: Identity Management and Authentication 

  • Concepts of identity and privacy 
  • Key distribution and user authentication 
  • Identity management systems and their use in threat management 
  • Privileges and rights  
  • Multifactor authentication 
  • Portable identities 
  • Biometric systems 
  • Single Sign-on 
Week 4: Transport Layer and Web Security 

  • Web Security fundamentals 
  • Transport Security Fundamentals 
  • Secure Protocols (HTTPS, SSH)  
  • Email Security 
  • Threat management in the transport layer 
Week 5: Physical Layer Security 

  • Interference 
  • Jamming 
  • Eavesdropping 
  • Traffic scanning 
  • Network Access Control 
  • IEEE 802.1X 
  • Wireless Access layer 
  • Mobile device security 
  • Physical security techniques 
  • Threat management in the physical layer 
Week 6 – 7: Wireless Security 

  • Wireless network fundamentals and characteristics 
  • 802.11 and 802.11i 
  • Threats and attacks on wireless networks 
  • WEP, WPA, WPA2 
  • Attacks on wireless clients (man in the middle attacks) 
  • Deployment of Secure wireless networks 
  • Secure wireless guest access 
Week 8 – 9: IP and Protocol Security 

  • Fundamentals of IP security 
  • Network Access Control 
  • Firewalls 
  • NAT 
  • Remote Access and VPN 
  • SNMP 
  • IPV6 Security 
  • Network protocol security (ARP, DNS etc.) 
  • Network security policy and procedures 
  • Network monitoring and incident management 
Week 10: Malicious Software and Threat Management 

  • Types of malware, viruses, and trojans 
  • Veil framework 
  • Propagation vulnerabilities 
  • Payload vulnerabilities 
  • Threat detection, management, and protection mechanisms 
  • Role of education and end-user 

 

Week 11: Network Intrusion Detection 

  • DOS and DDOS attacks 
  • Intrusion detection 
  • Network sniffers and scanners 
  • Intrusion prevention 
  • Logging and analysis 
  • Offensive security and threat hunting 

 

Please note that these topics are often refined and subject to change so for up to date weekly topics and suggested reading resources, please refer to the Moodle subject page.