Faculty of Health, Engineering and Science

School: Computer and Security Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

  • Unit Title

    Database Security
  • Unit Code

    CSI5207
  • Year

    2015
  • Enrolment Period

    1
  • Version

    2
  • Credit Points

    15
  • Full Year Unit

    N
  • Mode of Delivery

    On Campus
    Online

Description

This unit examines database information systems and the tools and techniques employed to make these resources as secure as possible. The unit examines database architectures and vulnerabilities, with a focus on network connected, centralised database systems. Security measures are examined from the point of view of both computing systems and organisational procedures, with an emphasis on web applications, e-commerce, auditing, roles and responsibilities and disaster recovery. The unit has a significant practical element allowing students to develop security policies and procedures and implement them using commercial database tools.

Prerequisite Rule

Students must pass 1 units from CSI4104, CSI5133

Equivalent Rule

Unit was previously coded CSI3302, CSI4206

Learning Outcomes

On completion of this unit students should be able to:

  1. Analyse security issues and solutions in database administration and management.
  2. Analyse security requirements for World Wide Web linked database applications.
  3. Apply database auditing.
  4. Apply database security models; security plans and policies.
  5. Create and manage database passwords, profiles, privileges and roles.
  6. Create strategies for data backup and disaster recovery.
  7. Define database architectures and their associated security requirements.
  8. Problem solve database security issues.

Unit Content

  1. Application of security procedures by database design and security prototyping.
  2. Auditing and event management.
  3. Database access controls.
  4. Database architectures and related security.
  5. Database management, backup and recovery.
  6. Database security models.
  7. Database security policies and plans.
  8. Risks and security issues in database administration.

Additional Learning Experience Information

Lectures, workshops and practical laboratory exercises.

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant Board of Examiners.

ON CAMPUS
TypeDescriptionValue
AssignmentWorkshop Materials and Report30%
ReportDatabase Security Report20%
Examination ^End of Semester Examination50%
ONLINE
TypeDescriptionValue
AssignmentWorkshop Materials and Report30%
ReportDatabase Security Report20%
Examination ^End of Semester Examination50%

^ Mandatory to Pass

Text References

  • ^ Basta, A., & Zgola, M. (2012). Database security (1st ed.). Boston: Cengage Learning.
  • Afyouni, S. (2005). Database security and auditing: Protecting data integrity and accessibility (1st ed.). New York: Course Technology.
  • Stuttard, D., & Pinto, M. (2011). The web application hacker's handbook: Finding and exploiting security flaws (2nd ed.). Boston: John Wiley and Sons.
  • Cherry, D. (2011). Securing SQL server: Protecting your database from attackers (1st ed.). USA: Syngress.

Website References

^ Mandatory reference


Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Academic Misconduct

Edith Cowan University has firm rules governing academic misconduct and there are substantial penalties that can be applied to students who are found in breach of these rules. Academic misconduct includes, but is not limited to:

  • plagiarism;
  • unauthorised collaboration;
  • cheating in examinations;
  • theft of other students' work;

Additionally, any material submitted for assessment purposes must be work that has not been submitted previously, by any person, for any other unit at ECU or elsewhere.

The ECU rules and policies governing all academic activities, including misconduct, can be accessed through the ECU website.

CSI5207|2|1

Faculty of Health, Engineering and Science

School: Computer and Security Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

  • Unit Title

    Database Security
  • Unit Code

    CSI5207
  • Year

    2015
  • Enrolment Period

    2
  • Version

    2
  • Credit Points

    15
  • Full Year Unit

    N
  • Mode of Delivery

    On Campus
    Online

Description

This unit examines database information systems and the tools and techniques employed to make these resources as secure as possible. The unit examines database architectures and vulnerabilities, with a focus on network connected, centralised database systems. Security measures are examined from the point of view of both computing systems and organisational procedures, with an emphasis on web applications, e-commerce, auditing, roles and responsibilities and disaster recovery. The unit has a significant practical element allowing students to develop security policies and procedures and implement them using commercial database tools.

Prerequisite Rule

Students must pass 1 units from CSI4104, CSI5133

Equivalent Rule

Unit was previously coded CSI3302, CSI4206

Learning Outcomes

On completion of this unit students should be able to:

  1. Analyse security issues and solutions in database administration and management.
  2. Analyse security requirements for World Wide Web linked database applications.
  3. Apply database auditing.
  4. Apply database security models; security plans and policies.
  5. Create and manage database passwords, profiles, privileges and roles.
  6. Create strategies for data backup and disaster recovery.
  7. Define database architectures and their associated security requirements.
  8. Problem solve database security issues.

Unit Content

  1. Application of security procedures by database design and security prototyping.
  2. Auditing and event management.
  3. Database access controls.
  4. Database architectures and related security.
  5. Database management, backup and recovery.
  6. Database security models.
  7. Database security policies and plans.
  8. Risks and security issues in database administration.

Additional Learning Experience Information

Lectures, workshops and practical laboratory exercises.

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant Board of Examiners.

ON CAMPUS
TypeDescriptionValue
AssignmentWorkshop Materials and Report30%
ReportDatabase Security Report20%
Examination ^End of Semester Examination50%
ONLINE
TypeDescriptionValue
AssignmentWorkshop Materials and Report30%
ReportDatabase Security Report20%
Examination ^End of Semester Examination50%

^ Mandatory to Pass

Text References

  • ^ Basta, A., & Zgola, M. (2012). Database security (1st ed.). Boston: Cengage Learning.
  • Afyouni, S. (2005). Database security and auditing: Protecting data integrity and accessibility (1st ed.). New York: Course Technology.
  • Stuttard, D., & Pinto, M. (2011). The web application hacker's handbook: Finding and exploiting security flaws (2nd ed.). Boston: John Wiley and Sons.
  • Cherry, D. (2011). Securing SQL server: Protecting your database from attackers (1st ed.). USA: Syngress.

Website References

^ Mandatory reference


Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Academic Misconduct

Edith Cowan University has firm rules governing academic misconduct and there are substantial penalties that can be applied to students who are found in breach of these rules. Academic misconduct includes, but is not limited to:

  • plagiarism;
  • unauthorised collaboration;
  • cheating in examinations;
  • theft of other students' work;

Additionally, any material submitted for assessment purposes must be work that has not been submitted previously, by any person, for any other unit at ECU or elsewhere.

The ECU rules and policies governing all academic activities, including misconduct, can be accessed through the ECU website.

CSI5207|2|2