FIT5027 Virtual private network - Semester 1, 2013

Layered structure of networks, security threats in an open network environment, and basic security. Detailed exposition of major tools and protocols used in VPNs, including firewalls, IPSec, Internet Security Association and Key Management Protocol (ISAKMP), Internet Key Exchange (IKE), Point-to-Point Protocol (PPP) and Point-to-Point Tunnelling Protocol (PPTP), Layer 2 Tunnelling Protocol (L2TP), Terminal Access Control Access Control System (TACACS), Secure Sockets Layer (SSL), and SOCKS. Exposition of principles and methodologies for the design and implementation of Intranets and Extranets using VPNs.

Mode of Delivery

Contact Hours

2 hrs lectures/wk, 2 hrs laboratories/wk

Workload requirements

Students will be expected to spend a total of 12 hours per week during semester on this unit as follows:

• Two-hour lecture and
• two-hour tutorial (or laboratory) requiring advance preparation;
• a minimum of 2-3 hours of personal study per one hour of contact time in order to satisfy the reading and assignment expectations.

• You will need to allocate up to 5 hours per week in some weeks, for use of a computer, including time for group meetings and project work deliberations.

Unit Relationships

Prohibitions

CPE5006

Chief Examiner

Campus Lecturer

Tutors

Academic Overview

Learning Outcomes

• develop a detailed knowledge and understanding of all major protocols used for VPN;
• detailed knowledge and understanding of VPN architectures including interaction with firewalls
• develop an understanding of major issues in implementing the protocols;
• have the knowledge and skills to objectively compare and contrast various VPN protocols (eg. L2TP with IPSec and the platform specific variations);
• have the knowledge and skills to enable them to design and implement standard and non-standard VPNs.

Unit Schedule

*Unit Schedule details will be maintained and communicated to you via your learning system.

Assessment Summary

Examination (2 hours): 40%; In-semester assessment: 60%

Teaching Approach

Assessment Requirements

Assessment Policy

Faculty Policy - Unit Assessment Hurdles (http://www.infotech.monash.edu.au/resources/staff/edgov/policies/assessment-examinations/unit-assessment-hurdles.html)

Academic Integrity - Please see the Demystifying Citing and Referencing tutorial at http://lib.monash.edu/tutorials/citing/

Assessment Tasks

Participation

• Assessment task 1

  Title:

  Assignment 1

  Description:

  This is a theoretical assignment requiring research into selected topic(s) relating to the concepts covered in the lectures. It is done individually by the students.

  Weighting:

  20%

  Criteria for assessment:

  This assignment tests the students' ability to to build upon the concepts learnt in the lectures, by independently researching the specified topics, and reporting upon these clearly and concisely, in their written reports. This requires:

  1. Correctness and understanding - there may be more than one "right" answer in many cases. We will look for answers that reflect understanding of the underlying principles and theories.
  2. Completeness - that you have answered all parts of each question.
  3. Presentation - that you have presented your answers in a suitably formatted report style.
  4. Use of evidence and argument - you are able to explain your position by using logical argument drawing on the theory presented in the unit.

  Due date:

  Friday 26 April 2012, 12pm (teaching week 07)

• Assessment task 2

  Title:

  Assignment 2

  Description:

  This assignment is completed in groups of up to five students. The students develop and demonstrate the specified aspects of a VPN design as a proof-of-concept demonstration in the lab.
  
  This assignment tests the practical skills learnt in the tutorial sessions by students developing practical aspects of the VPN, and demonstrating these aspects in the last week of the semester.

  Weighting:

  20%

  Criteria for assessment:

  Student demonstrations will be assessed on the basis of competence and achievements. The written report will be assessed on the basis of correctness and understanding, completeness, presentation and use of evidence and argument.

  The assessment criteria takes into account (1) the overall work load of the group and (2) any variations in levels of individual contribution when allocating marks to each group member.

  Due date:

  Assessment during the Week 12 tutorials. Written report due Week 14 (TBA)

• Assessment task 3

  Title:

  Tutorial work assessment

  Description:

  The theoretical aspects covered in the lectures are practically undertaken in the tutorial sessions by the students for this assessment.
  
  This assessment comprises the following.

  • demonstration of hands-on skills acquired in the labs relating to the VPN developments, including related skills in areas of system management and network administration.

  Weighting:

  20%

  Criteria for assessment:

  Tutorial sheets are intended to be journals as well as answer sheets, where students should show the details of how they worked on the tutorial tasks. Completion of these sheets during the labs allows obtaining timely feedback.

  • Assessment marks will be based on ability to demonstrate hands-on skills acquired in the labs.
    Portions will be based on correct answers to questions pertaining to tutorial materials.
  • The assessment is in the form of test conducted in Week 11 during the tutorials.

  Due date:

  During the Week 11 tutorials

Examinations

• Examination 1

  Weighting:

  40%

  Length:

  2 hours

  Type (open/closed book):

  Closed book

  Electronic devices allowed in the exam:

  None

Learning resources

Reading list

Greg Holden. Guide to Firewalls and Network Security Intrusion Detection and VPNs. THOMSON ISBN 0619130393

Greg Holden. Guide to Network Defense and Counter Measures. THOMSON ISBN 0619131241

Thaddeus Fortenberry. Windows 2000 Virtual Private Networking. 1st Edition. Que (2000) ISBN 1578702461

Meeta Gupta. Building a Virtual Private Network. 1st Edition. Premier Press (2002) ISBN 1931841810

Feedback to you

• Informal feedback on progress in labs/tutes
• Graded assignments with comments

Extensions and penalties

Returning assignments

Resubmission of assignments

Resubmission of assignments and tutorial work will not be allowed.

Referencing requirements

Referencing requirements will be provided during lectures.

Assignment submission

Online submission

If Electronic Submission has been approved for your unit, please submit your work via the learning system for this unit, which you can access via links in the my.monash portal.

Required Resources

The standard operating environment provided in FIT computer labs is considered adequate for most purposes. However, most of the tutorial exercises require the use of an open source Linux environment, which is provided in the assigned FIT computer laboratory.

Software may be:

• downloaded from the resources page on the unit web site
• or purchased at academic price at good software retailers

Other Information

Policies

Graduate Attributes Policy

Student services

Monash University Library

Disability Liaison Unit

Your feedback to Us

Previous Student Evaluations of this Unit

There are no changes to the unit. Feedback from previous students evaluation has been very positive and the unit is very well balanced.