Digital Infrastructure Security G (12131.1)

This unit explores cyber security architecture and planning methods, where we will look at common security platforms. We will learn the fundamental approach to designing a modern digital infrastructure architecture with a focus on its cyber security. We will then look at common approaches and platforms, such as layered defence strategies, Zero Trust Architectures (ZTA), Security Access Service Edge (SASE), Cloud Security Access Brokers (CASB), Open Security Architecture (OSA), and their relation to modern concepts such as cloud security (XaaS), network and web security, mobile security, distributed systems security, and software security. Students will gain practical experience in implementing and evaluating incident response methodologies, such as NIST and ACSC's Incident Response Plans.

Learning outcomes

After successful completion of this unit, students will be able to:
1. Analyse cyber tools and layered security defence strategies for infrastructure security;
2. Evaluate Digital Engineering methodologies for the Cyber physical system;
3. Design cyber security architecture considering the capabilities and limitations of common security platforms; and
4. Evaluate incident response methodologies, including detection, response, recovery, hunting, and monitoring, as well as breach response techniques.

Graduate attributes

1. UC graduates are professional - communicate effectively
1. UC graduates are professional - display initiative and drive, and use their organisation skills to plan and manage their workload
1. UC graduates are professional - employ up-to-date and relevant knowledge and skills
1. UC graduates are professional - use creativity, critical thinking, analysis and research skills to solve theoretical and real-world problems
2. UC graduates are global citizens - adopt an informed and balanced approach across professional and international boundaries
2. UC graduates are global citizens - behave ethically and sustainably in their professional and personal lives
2. UC graduates are global citizens - make creative use of technology in their learning and professional lives
2. UC graduates are global citizens - think globally about issues in their profession
3. UC graduates are lifelong learners - adapt to complexity, ambiguity and change by being flexible and keen to engage with new ideas
3. UC graduates are lifelong learners - be self-aware
3. UC graduates are lifelong learners - reflect on their own practice, updating and adapting their knowledge and skills for continual professional and academic development

Skills development

This unit meets the following SFIA skills specifications:
Information security SCTY
SFIA skills are defined by levels of responsibility based on autonomy, influence, complexity, business skills, and knowledge. Although this unit may cover knowledge and skills at higher levels, it is expected that graduates of undergraduate degrees will be capable of operating at Level 2 overall.

Seoul Accord
The UC generic attributes address most of the requirements of the Seoul Accord. The remaining skills that are addressed in this unit are:
3. Problem Analysis
4. Design/Development of Solutions
This unit addresses a complex computing problem that has the following characteristics:

involves wide-ranging or conflicting technical, computing, and other issues;
a solution requires the use of in-depth computing or domain knowledge and an analytical approach that is based on well-founded principles;
is outside problems encompassed by standards and standard practice for professional computing;
has significant consequences in a range of contexts;
is a high-level problem possibly including many component parts or sub-problems;
identification of a requirement or the cause of a problem is ill-defined or unknown.
These complex computing problems are assessed in the following assessment items: 

Assessment 2: Research-styled paper

Assessment 3: Incident Response Simulation

Prerequisites

None.

Corequisites

None.

Incompatible units

None.

Equivalent units

None.

Assumed knowledge

None.