INFO 1016 Security Foundations
The Complete Study & Assessment Guide · S2 2026INFO 1016 Overview
- Adelaide University
- Semester 2, 2026
- an undergraduate cybersecurity course
- a security foundations course
INFO 1016 spans CIA security properties, threat landscapes, network layers, cryptography, social engineering, attack frameworks, vulnerabilities, Essential Eight controls and incident recovery. It is taught within Adelaide University. It is an undergraduate cybersecurity course.
- Security protects properties Controls should be tied to confidentiality, integrity or availability of a named asset.
- Trust boundaries locate risk A system becomes analysable when authority and data crossing points are explicit.
- Defence needs layers Preventive controls can fail, so detection, response and recovery remain necessary.
What you get in the full INFO 1016 Study & Assessment Guide
- 8 chapters, 23 pages — every assessed topic
- 11 original practice questions, each with a model answer
- 8 worked examples, solved the way INFO 1016 marks
- 15 computed figures, redrawn from the course’s own numbers
- Before-you-submit checklist for the Peer Review (40%) — what markers reward, what costs marks
Free on this page: assessment table, chapter map, one worked example, key terms, FAQ. The rest is in the full study & assessment guide.
How INFO 1016 is assessed
| Component | Weight | Format |
|---|---|---|
| Case Study | 30% | the landed official record |
| Peer Review | 40% | the landed official record |
| Creative Work | 30% | the landed official record |
The official page publishes Case Study 30%, Peer Review 40% and Creative Work 30% at the landed official record; the separately captured current route is byte-identical and not counted as a second source.
What other students are asking about INFO 1016
- Where can I find lecture notes or study guides for INFO 1016 at Adelaide?
- The INFO 1016 study guide in AskSia Library covers Security Foundations in 8 chapters, with the assessment table, a chapter-by-chapter topic map, key terms and a worked example, free to read on this page.
- Is there a final exam in INFO 1016?
- No final exam is listed in the offering this AskSia Library guide is built from; INFO 1016 is assessed by Case Study 30%, Peer Review 40%, Creative Work 30%.
- What does INFO 1016 cover on threat landscapes and incident evidence?
- In AskSia Library's INFO 1016 guide, the Threat Landscapes and Incident Evidence chapter explains threat actor · attack surface · indicator · connect current threat evidence to assets, exposure and plausible actor action.
- What does INFO 1016 cover on networks, addressing and secure web communication?
- In AskSia Library's INFO 1016 guide, the Networks, Addressing and Secure Web Communication chapter explains iP routing · DNS · HTTPS · follow a connection through link, addressing, naming, routing and secure application layers.
- What does INFO 1016 cover on cryptography, encryption and hashing?
- In AskSia Library's INFO 1016 guide, the Cryptography, Encryption and Hashing chapter explains encryption · symmetric cryptography · cryptographic hash · select cryptographic functions based on confidentiality, integrity and key needs.
What INFO 1016 covers
The sequence opens at Security Objectives, Assets and Trade-offs, develops its central analytical shift in Human Threats and Social Engineering, and closes with Defence, Incident Response and Recovery.
Security Objectives, Assets and Trade-offs
confidentiality · integrity · availability · prioritise security properties for a named system and consequenceDefine confidentiality
The course material gives this chapter a concrete anchor: The opening topic teaches the CIA triad together with explicit trade-offs.
- Confidentiality
- Integrity
- Availability
- Applying confidentiality
- Limits of integrity and availability
Threat Landscapes and Incident Evidence
threat actor · attack surface · indicator · connect current threat evidence to assets, exposure and plausible actor actionDefine threat actor
The course material gives this chapter a concrete anchor: Landscape and incident pages teach context before control selection.
- Threat actor
- Attack surface
- Indicator
- Applying threat actor
- Limits of attack surface and indicator
Networks, Addressing and Secure Web Communication
IP routing · DNS · HTTPS · follow a connection through link, addressing, naming, routing and secure application layersDefine IP routing
The course material gives this chapter a concrete anchor: The network strand builds secure communication from layered internet operation.
- IP routing
- DNS
- HTTPS
- Applying IP routing
- Limits of DNS and HTTPS
Cryptography, Encryption and Hashing
encryption · symmetric cryptography · cryptographic hash · select cryptographic functions based on confidentiality, integrity and key needsDefine encryption
The course material gives this chapter a concrete anchor: Cryptography pages distinguish several functions that novices often collapse.
- Encryption
- Symmetric cryptography
- Cryptographic hash
- Applying encryption
- Limits of symmetric cryptography and cryptographic hash
Human Threats and Social Engineering
social engineering · insider threat · security awareness · analyse how authority, urgency and workflow enable manipulationDefine social engineering
The course material gives this chapter a concrete anchor: Human-threat topics pair education with structural mitigation.
- Social engineering
- Insider threat
- Security awareness
- Applying social engineering
- Limits of insider threat and security awareness
Attack Chains and Adversary Behaviour
Cyber Kill Chain · MITRE ATT&CK · data exfiltration · trace observed and possible adversary actions into detection and interruption opportunitiesDefine Cyber Kill Chain
The course material gives this chapter a concrete anchor: The course uses two attack frameworks and an exfiltration sequence to structure adversary reasoning.
- Cyber Kill Chain
- MITRE ATT&CK
- Data exfiltration
- Applying Cyber Kill Chain
- Limits of MITRE ATT&CK and data exfiltration
Vulnerabilities, CVE, CWE and CVSS
vulnerability · CVE · CVSS · combine technical severity with exposure, exploitability, asset value and compensating controlsDefine vulnerability
The course material gives this chapter a concrete anchor: Vulnerability identifiers and scores are taught alongside practical security work.
- Vulnerability
- CVE
- CVSS
- Applying vulnerability
- Limits of CVE and CVSS
Defence, Incident Response and Recovery
Essential Eight · incident response · backup · combine baseline controls with evidence-preserving response and tested recoveryDefine Essential Eight
The course material gives this chapter a concrete anchor: The final defence arc links prevention to incident handling and recovery.
- Essential Eight
- Incident response
- Backup
- Applying Essential Eight
- Limits of incident response and backup
It carries credit value controlled by the live study plan. It is positioned as a security foundations course.
The course moves from assets and threats through both human and technical attack paths to defence, response and recovery.
The operational assessment conditions matter here.
The captured official page does not list a separate final examination.
What makes INFO 1016 demanding is concrete: reasoning across people, protocols and controls without confusing one successful defence with elimination of residual risk
No component hurdle is asserted beyond the captured official assessment list.
For enrolment planning, Consult the current Adelaide enrolment controls.
The sequence opens at Security Objectives, Assets and Trade-offs, develops its central analytical shift in Human Threats and Social Engineering, and closes with Defence, Incident Response and Recovery.
Worked example · free
Respond to credential theft
- 1Contain the account and preserve evidence.
- 1Identify assets, sessions and affected identities.
- 1Trace entry, actions and possible exfiltration.
- 1Recover, notify and improve layered controls.
Key terms
- Confidentiality
- Protection against unauthorised disclosure. This chapter uses the concept when students prioritise security properties for a named system and consequence.
- Integrity
- Protection of accuracy, completeness and authorised change. It helps explain the reasoning required to prioritise security properties for a named system and consequence.
- Availability
- Reliable authorised access when needed. Its limit matters because maximum protection of one property can reduce another property or legitimate use.
- Threat actor
- Person or group with capability and intent to cause harm. This chapter uses the concept when students connect current threat evidence to assets, exposure and plausible actor action.
- Attack surface
- Exposed points through which a system may be influenced. It helps explain the reasoning required to connect current threat evidence to assets, exposure and plausible actor action.
- Indicator
- Observable sign potentially associated with malicious activity. Its limit matters because a dramatic incident elsewhere does not establish likelihood for this system.
- IP routing
- Forwarding packets among networks using addresses and routes. This chapter uses the concept when students follow a connection through link, addressing, naming, routing and secure application layers.
- DNS
- System resolving names to resource information. It helps explain the reasoning required to follow a connection through link, addressing, naming, routing and secure application layers.
- HTTPS
- HTTP protected by transport encryption and authentication mechanisms. Its limit matters because a padlock does not establish that the endpoint is trustworthy in every other respect.
- Encryption
- Reversible transformation protecting data with a key. This chapter uses the concept when students select cryptographic functions based on confidentiality, integrity and key needs.
- Symmetric cryptography
- Encryption using a shared secret key. It helps explain the reasoning required to select cryptographic functions based on confidentiality, integrity and key needs.
- Cryptographic hash
- One-way digest designed to reveal changes and resist manipulation. Its limit matters because algorithm names alone do not solve key generation, storage, rotation or endpoint compromise.
- Social engineering
- Manipulation of people to bypass or misuse controls. This chapter uses the concept when students analyse how authority, urgency and workflow enable manipulation.
- Insider threat
- Risk arising from trusted access used maliciously, negligently or under coercion. It helps explain the reasoning required to analyse how authority, urgency and workflow enable manipulation.
INFO 1016 FAQ
How does assessment work in Security Foundations?
A case study, peer review and creative work; official category weights are pinned. The captured official page does not list a separate final examination. No component hurdle is asserted beyond the captured official assessment list.
Where is the hardest reasoning in Security Foundations?
Reasoning across people, protocols and controls without confusing one successful defence with elimination of residual risk. INFO 1016 spans CIA security properties, threat landscapes, network layers, cryptography, social engineering, attack frameworks, vulnerabilities, Essential Eight controls and incident recovery.
Which pass conditions apply in Security Foundations?
No component hurdle is asserted beyond the captured official assessment list. A case study, peer review and creative work; official category weights are pinned. The captured official page does not list a separate final examination.
Which teaching period does this Security Foundations resource cover?
It is aligned to Semester 2, 2026; confirm your enrolled class and timetable in the current institutional system. INFO 1016 spans CIA security properties, threat landscapes, network layers, cryptography, social engineering, attack frameworks, vulnerabilities, Essential Eight controls and incident recovery.
What should a student check before enrolling in Security Foundations?
Consult the current Adelaide enrolment controls. This resource covers Semester 2, 2026. INFO 1016 spans CIA security properties, threat landscapes, network layers, cryptography, social engineering, attack frameworks, vulnerabilities, Essential Eight controls and incident recovery.
Who controls the official rules for Security Foundations?
The university does. This is an independent INFO 1016 study resource; current institutional instructions remain authoritative for assessment operation. INFO 1016 spans CIA security properties, threat landscapes, network layers, cryptography, social engineering, attack frameworks, vulnerabilities, Essential Eight controls and incident recovery.
What form does the final assessed task take in Security Foundations?
The captured official page does not list a separate final examination. A case study, peer review and creative work; official category weights are pinned. No component hurdle is asserted beyond the captured official assessment list.
Questions students ask in each INFO 1016 chapter
- Which criteria should govern an attempt to prioritise security properties for a named system and consequence?
- Prioritise security properties for a named system and consequence. The opening topic teaches the CIA triad together with explicit trade-offs. Protection against unauthorised disclosure. This chapter uses the concept when students prioritise security properties for a named system and consequence. Use this definition when the task is to prioritise security properties for a named system and consequence. Chapter 01 · Security Objectives, Assets and Trade-offs
- Which links need evidence when students connect current threat evidence to assets, exposure and plausible actor action?
- Connect current threat evidence to assets, exposure and plausible actor action. Landscape and incident pages teach context before control selection. Person or group with capability and intent to cause harm. This chapter uses the concept when students connect current threat evidence to assets, exposure and plausible actor action. Use this definition when the task is to connect current threat evidence to assets, exposure and plausible actor action. Chapter 02 · Threat Landscapes and Incident Evidence
- Where does the chain begin when students follow a connection through link, addressing, naming, routing and secure application layers?
- Follow a connection through link, addressing, naming, routing and secure application layers. The network strand builds secure communication from layered internet operation. Forwarding packets among networks using addresses and routes. This chapter uses the concept when students follow a connection through link, addressing, naming, routing and secure application layers. Chapter 03 · Networks, Addressing and Secure Web Communication
- Which criteria should govern an attempt to select cryptographic functions based on confidentiality, integrity and key needs?
- Select cryptographic functions based on confidentiality, integrity and key needs. Cryptography pages distinguish several functions that novices often collapse. Reversible transformation protecting data with a key. This chapter uses the concept when students select cryptographic functions based on confidentiality, integrity and key needs. Use this definition when the task is to select cryptographic functions based on confidentiality, integrity and key needs. Chapter 04 · Cryptography, Encryption and Hashing
- Where should the reasoning begin when students analyse how authority, urgency and workflow enable manipulation?
- Analyse how authority, urgency and workflow enable manipulation. Human-threat topics pair education with structural mitigation. Manipulation of people to bypass or misuse controls. This chapter uses the concept when students analyse how authority, urgency and workflow enable manipulation. Use this definition when the task is to analyse how authority, urgency and workflow enable manipulation. Chapter 05 · Human Threats and Social Engineering
- Where does the chain begin when students trace observed and possible adversary actions into detection and interruption opportunities?
- Trace observed and possible adversary actions into detection and interruption opportunities. The course uses two attack frameworks and an exfiltration sequence to structure adversary reasoning. Chapter 06 · Attack Chains and Adversary Behaviour
- What must be brought together to combine technical severity with exposure, exploitability, asset value and compensating controls?
- Combine technical severity with exposure, exploitability, asset value and compensating controls. Vulnerability identifiers and scores are taught alongside practical security work. Weakness that may be exploited to violate security properties. This chapter uses the concept when students combine technical severity with exposure, exploitability, asset value and compensating controls. Use this definition when the task is to combine technical severity with exposure, exploitability, asset value and compensating controls. Chapter 07 · Vulnerabilities, CVE, CWE and CVSS
- What must be brought together to combine baseline controls with evidence-preserving response and tested recovery?
- Combine baseline controls with evidence-preserving response and tested recovery. The final defence arc links prevention to incident handling and recovery. Australian baseline mitigation strategies for common cyber threats. This chapter uses the concept when students combine baseline controls with evidence-preserving response and tested recovery. Use this definition when the task is to combine baseline controls with evidence-preserving response and tested recovery. Chapter 08 · Defence, Incident Response and Recovery
How to prepare for the assessments
Retrieve the course map, practise the recurring method—identify the asset, security property, actor and trust boundary, trace the attack path through human and technical layers, map preventive, detective and corrective controls, test control failure and residual risk, then plan accountable response and recovery—on changed scenarios, and verify every operational assessment detail in the live institutional system.
Your AI Cybersecurity tutor for INFO 1016
Stuck on a hard INFO 1016 question? Sia is AskSia’s AI Cybersecurity tutor — ask any INFO 1016 Security Foundations question and get a clear, step-by-step explanation grounded in how the course is actually taught and assessed. Read this whole study guide free, then take your hardest questions to Sia.