Unit outline_

CSEC5615: Theory and Practice of Cloud Security

Semester 1, 2026 [Normal evening] - Camperdown/Darlington, Sydney

Cloud security is an integral part of any cybersecurity portfolio. Increasingly data and services are moved to the cloud by all types of organizations, such as enterprises and governments. Such data and services become lucrative targets for attackers and in the last few years we have witnessed cloud security breaches in scales we have never witnessed before. This unit provides theoretical, design, and practical skills that are required to design, deploy, and maintain highly secure cloud infrastructure.

Unit details and rules

Academic unit Computer Science
Credit points 6
Prerequisites
? 
None
Corequisites
? 
None
Prohibitions
? 
OCSE5615
Assumed knowledge
? 

CSEC5616 or OCSE5616 or ELEC5616 or INFO3616 or INFO2222

Available to study abroad and exchange students

No

Teaching staff

Coordinator Sri AravindaKrishnan Thyagarajan, aravind.thyagarajan@sydney.edu.au
The census date for this unit availability is 31 March 2026
Type Description Weight Due Length Use of AI
Written exam hurdle task Final exam
MCQ and short answers
50% Formal exam period 2 hours AI prohibited
Outcomes assessed: LO1 LO2 LO3 LO4 LO5 LO6 LO7 LO8 LO9 LO10 LO11
Practical skill Tutorial assessment 1
Cloud platform
1% Week 01
Due date: 01 Mar 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO1
In-class quiz Quiz 1
MCQ
1% Week 02
Due date: 05 Mar 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO1
Practical skill Tutorial assessment 2
Cloud Platform
1% Week 02
Due date: 08 Mar 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO2
In-class quiz Quiz 2
MCQ
1% Week 03
Due date: 12 Mar 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO2
Practical skill Tutorial assessment 3
Cloud Platform
1% Week 03
Due date: 15 Mar 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO5
In-class quiz Quiz 3
MCQ
1% Week 04
Due date: 19 Mar 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO2
Practical skill Tutorial assessment 4
Cloud platform
1% Week 04
Due date: 22 Mar 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO2
Practical skill Assignment 1
Submit answers to problems
15% Week 05
Due date: 29 Mar 2026 at 23:59
10 working days AI allowed
Outcomes assessed: LO1 LO2 LO3 LO4 LO5 LO6 LO7 LO8 LO9 LO10 LO11
In-class quiz Quiz 4
MCQ
1% Week 05
Due date: 26 Mar 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO4
Practical skill Tutorial assessment 5
Cloud platform
1% Week 05
Due date: 29 Mar 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO3 LO8
In-class quiz Quiz 5
MCQ
1% Week 06
Due date: 02 Apr 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO3 LO4
Practical skill Tutorial assessment 6
Cloud platform
1% Week 06
Due date: 05 Apr 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO6
In-class quiz Quiz 6
MCQ
1% Week 07
Due date: 09 Apr 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO4
Practical skill Tutorial assessment 7
Cloud platform
1% Week 07
Due date: 19 Apr 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO6
In-class quiz Quiz 7
MCQ
1% Week 08
Due date: 23 Apr 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO4 LO5
Practical skill Tutorial assessment 8
Cloud platform
1% Week 08
Due date: 26 Apr 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO7
In-class quiz Quiz 8
MCQ
1% Week 09
Due date: 30 Apr 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO5
Practical skill Tutorial assessment 9
Cloud platform
0.5% Week 09
Due date: 03 May 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO6 LO7 LO8
In-class quiz Quiz 9
MCQ
1% Week 10
Due date: 07 May 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO6 LO7
Practical skill Tutorial assessment 10
Cloud platform
0.5% Week 10
Due date: 10 May 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO7
In-class quiz Quiz 10
MCQ
1% Week 11
Due date: 14 May 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO7 LO8
Practical skill Tutorial assessment 11
Cloud platform
0.5% Week 11
Due date: 17 May 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO4 LO8
Practical skill Assignment 2
Submit answers to problems
15% Week 12
Due date: 24 May 2026 at 23:59
10 working days AI allowed
Outcomes assessed: LO1 LO2 LO3 LO4 LO5 LO6 LO7 LO8 LO9 LO10 LO11
Practical skill Tutorial assessment 12
Cloud platform
0.5% Week 12
Due date: 24 May 2026 at 23:59
N/A AI allowed
Outcomes assessed: LO3 LO8 LO11
hurdle task = hurdle task ?

Assessment summary

Assignments - 1&2 – Students work to solve a set of problems and write up the solutions in a typed PDF. 

Tutorial Assessments - Individual and group weekly tutorial assessments using Azure platform. Submittion usually is done during the lab or at the end of that week. 

Quizzes - Individual weekly in-class quiz. Submission done during the tutorial. 

Final Exam – Closed book final exam. Students must score at least 40% in the final exam to pass the unit (see Pass requirements).

Conditions for pass in this unit:

  • At least 40% in the final exam
  • At least 50% total

Assessment criteria

The University awards common result grades, set out in the Coursework Policy 2014 (Schedule 1).

As a general guide, a high distinction indicates work of an exceptional standard, a distinction a very high standard, a credit a good standard, and a pass an acceptable standard.

Result name

Mark range

Description

High distinction

85 - 100

Awarded when you demonstrate the learning outcomes for the unit at an exceptional standard, as defined by grade descriptors or exemplars outlined by your faculty or school. 

Distinction

75 - 84

Awarded when you demonstrate the learning outcomes for the unit at a very high standard, as defined by grade descriptors or exemplars outlined by your faculty or school.

Credit

65 - 74

Awarded when you demonstrate the learning outcomes for the unit at a good standard, as defined by grade descriptors or exemplars outlined by your faculty or school.

Pass

50 - 64

Awarded when you demonstrate the learning outcomes for the unit at an acceptable standard, as defined by grade descriptors or exemplars outlined by your faculty or school.
Fail 0 - 49 When you don’t meet the learning outcomes of the unit to a satisfactory standard.

For more information see guide to grades.

Use of generative artificial intelligence (AI)

You can use generative AI tools for open assessments. Restrictions on AI use apply to secure, supervised assessments used to confirm if students have met specific learning outcomes.

Refer to the assessment table above to see if AI is allowed, for assessments in this unit and check Canvas for full instructions on assessment tasks and AI use.

If you use AI, you must always acknowledge it. Misusing AI may lead to a breach of the Academic Integrity Policy.

Visit the Current Students website for more information on AI in assessments, including details on how to acknowledge its use.

Late submission

In accordance with University policy, these penalties apply when written work is submitted after 11:59pm on the due date:

  • Deduction of 5% of the maximum mark for each calendar day after the due date.
  • After ten calendar days late, a mark of zero will be awarded.

This unit has an exception to the standard University policy or supplementary information has been provided by the unit coordinator. This information is displayed below:

Only for assignments: No penalty for 5 days after the actual due date - Simple Extension. 5% for each late day beyond the Simple Extension, and no marks for submissions later than 7 days after the actual due date. No simple extension is available for tutorial assessments or quizzes. Late submissions will receive no marks.

Academic integrity

The University expects students to act ethically and honestly and will treat all allegations of academic integrity breaches seriously.

Our website provides information on academic integrity and the resources available to all students. This includes advice on how to avoid common breaches of academic integrity. Ensure that you have completed the Academic Honesty Education Module (AHEM) which is mandatory for all commencing coursework students

Penalties for serious breaches can significantly impact your studies and your career after graduation. It is important that you speak with your unit coordinator if you need help with completing assessments.

Visit the Current Students website for more information on AI in assessments, including details on how to acknowledge its use.

Simple extensions

If you encounter a problem submitting your work on time, you may be able to apply for an extension of five calendar days through a simple extension.  The application process will be different depending on the type of assessment and extensions cannot be granted for some assessment types like exams.

Special consideration

If exceptional circumstances mean you can’t complete an assessment, you need consideration for a longer period of time, or if you have essential commitments which impact your performance in an assessment, you may be eligible for special consideration or special arrangements.

Special consideration applications will not be affected by a simple extension application.

Using AI responsibly

Co-created with students, AI in Education includes lots of helpful examples of how students use generative AI tools to support their learning. It explains how generative AI works, the different tools available and how to use them responsibly and productively.

Support for students

The Support for Students Policy reflects the University’s commitment to supporting students in their academic journey and making the University safe for students. It is important that you read and understand this policy so that you are familiar with the range of support services available to you and understand how to engage with them.

The University uses email as its primary source of communication with students who need support under the Support for Students Policy. Make sure you check your University email regularly and respond to any communications received from the University.

Learning resources and detailed information about weekly assessment and learning activities can be accessed via Canvas. It is essential that you visit your unit of study Canvas site to ensure you are up to date with all of your tasks.

If you are having difficulties completing your studies, or are feeling unsure about your progress, we are here to help. You can access the support services offered by the University at any time:

Support and Services (including health and wellbeing services, financial support and learning support)
Course planning and administration
Meet with an Academic Adviser

WK Topic Learning activity Learning outcomes
Week 01 Foundations of Cloud and Security Lecture (2 hr) LO1
Microsoft Azure introduction Tutorial (1 hr) LO1
Week 02 Fundamentals of Data Protection Strategies for cloud Lecture (2 hr) LO2
Azure Storage and Storage Encryption Tutorial (1 hr) LO2
Week 03 Cloud Data Security Techniques Lecture (2 hr) LO2
Azure IAM Tutorial (1 hr) LO5
Week 04 Application Security in Cloud Lecture (2 hr) LO4
Azure Key Vault and Data Encryption Tutorial (1 hr) LO2
Week 05 Securing Data and Applications in Cloud Workflow Lecture (2 hr) LO3 LO4
Microsoft Threat Modelling Tutorial (1 hr) LO3 LO8
Week 06 Advanced Data and Application Protection Strategies Lecture (2 hr) LO4
Azure network security Types in Microsoft Azure Tutorial (1 hr) LO6
Week 07 Secure and Verifiable Cloud Computation Lecture (2 hr) LO4
Azure Networking Tutorial (1 hr) LO6
Week 08 Identity and Access Management (IAM) Lecture (2 hr) LO5
Docker Tutorial (1 hr) LO7
Week 09 Securing Network, Container Security, and Vulnerabilities Lecture (2 hr) LO6 LO7
Week 10 Emerging Technologies: Threats and Opportunities Lecture (2 hr) LO7 LO8
Azure Docker Tutorial (1 hr) LO7
Week 11 Security as a Service (SECaaS) and Incident Response Self-directed learning (2 hr) LO9 LO11
Azure DevOps Tutorial (1 hr) LO4 LO8
Week 12 Compliance, Standards, and Auditing Lecture (2 hr) LO10
Security Alerts, Azure Sentinel and WAF Tutorial (1 hr) LO3 LO8 LO11
Week 13 Recap Lecture (2 hr) LO1 LO2 LO3 LO4 LO5 LO6 LO7 LO8 LO9 LO10 LO11
Recap Tutorial (1 hr) LO1 LO2 LO3 LO4 LO5 LO6 LO7 LO8 LO9 LO10 LO11

Attendance and class requirements

Attendance is not mandatory. But for tutorials it is essential that you review the tutorial content in advance of each session and there will be assessments. Your proactive preparation will enhance the overall learning experience.

 

Study commitment

Typically, there is a minimum expectation of 1.5-2 hours of student effort per week per credit point for units of study offered over a full semester. For a 6 credit point unit, this equates to roughly 120-150 hours of student effort in total.

Required readings


1 - Book: Modern Cryptography by Yehuda Lindell and Jonathan Katz

In-class references to fundamental and recent research papers.

(Useful readings for practical perspective)
2 - Book: Security, Privacy, and Digital Forensics in the Cloud (2019) by Lei Chen, Hassan Takabi, Nhien-An Le-Khac

3- Book: (ISC)2 CCSP Certified Cloud Security Professional Official Study Guide, 3rd Edition by Mike Chapple, David Seidl

3- Book: Practical Cloud Security (2019) by Chris Dotson

4- NIST Special Publication 800-190 : Application Container Security Guide

Learning outcomes are what students know, understand and are able to do on completion of a unit of study. They are aligned with the University's graduate qualities and are assessed as part of the curriculum.

At the completion of this unit, you should be able to:

  • LO1. Understand the basic concepts, architecture, and design principles of cloud computing.
  • LO2. Comprehend and apply strategies for cloud data security and privacy.
  • LO3. Recognize and evaluate cloud infrastructure security risks, vulnerabilities and threats.
  • LO4. Analyse application-layer security challenges in the cloud and their solutions.
  • LO5. Explore the concepts of identity and access management (IAM) and how they are implemented in the cloud.
  • LO6. Demonstrate knowledge of advanced privacy-preserving and secure computation techniques applicable to the cloud.
  • LO7. Learn the best practices for container security and how to secure containerized applications.
  • LO8. Develop skills for managing vulnerabilities and threats in the cloud environment and explore different techniques to secure it.
  • LO9. Develop an understanding of Security as a Service (SECaaS) and its benefits to the cloud customers.
  • LO10. Describe and research various cloud security standards to ensure regulatory and legal requirements fulfillment.
  • LO11. Develop a deep understanding of cloud incident response frameworks, methodologies, and processes and how to contain and mitigate security incidents.

Graduate qualities

The graduate qualities are the qualities and skills that all University of Sydney graduates must demonstrate on successful completion of an award course. As a future Sydney graduate, the set of qualities have been designed to equip you for the contemporary world.

GQ1 Depth of disciplinary expertise

Deep disciplinary expertise is the ability to integrate and rigorously apply knowledge, understanding and skills of a recognised discipline defined by scholarly activity, as well as familiarity with evolving practice of the discipline.

GQ2 Critical thinking and problem solving

Critical thinking and problem solving are the questioning of ideas, evidence and assumptions in order to propose and evaluate hypotheses or alternative arguments before formulating a conclusion or a solution to an identified problem.

GQ3 Oral and written communication

Effective communication, in both oral and written form, is the clear exchange of meaning in a manner that is appropriate to audience and context.

GQ4 Information and digital literacy

Information and digital literacy is the ability to locate, interpret, evaluate, manage, adapt, integrate, create and convey information using appropriate resources, tools and strategies.

GQ5 Inventiveness

Generating novel ideas and solutions.

GQ6 Cultural competence

Cultural Competence is the ability to actively, ethically, respectfully, and successfully engage across and between cultures. In the Australian context, this includes and celebrates Aboriginal and Torres Strait Islander cultures, knowledge systems, and a mature understanding of contemporary issues.

GQ7 Interdisciplinary effectiveness

Interdisciplinary effectiveness is the integration and synthesis of multiple viewpoints and practices, working effectively across disciplinary boundaries.

GQ8 Integrated professional, ethical, and personal identity

An integrated professional, ethical and personal identity is understanding the interaction between one’s personal and professional selves in an ethical context.

GQ9 Influence

Engaging others in a process, idea or vision.

Outcome map

Learning outcomes Graduate qualities
GQ1 GQ2 GQ3 GQ4 GQ5 GQ6 GQ7 GQ8 GQ9

This section outlines changes made to this unit following staff and student reviews.

new course created

N/A

Additional costs

N/A

Site visit guidelines

N/A

Work, health and safety

N/A

Disclaimer

Important: the University of Sydney regularly reviews units of study and reserves the right to change the units of study available annually. To stay up to date on available study options, including unit of study details and availability, refer to the relevant handbook.

To help you understand common terms that we use at the University, we offer an online glossary.