5) Explain two outcomes an attacker may aim for with a Buffer overflow attack. Sketch how and why a Buffer overflow attack works. You do not need to write code but can if it helps you to explain. 6) Explain what a Trojan Horse is. Describe two distinct methods of identifying a Trojan Horse and explain when and why each of those methods might be appropriate. 7) What is a honeypot? What role might it play in the detection and management of intrusions? Give an example to illustrate how particular data within a real system might be considered to be a honeytoken.

5) Explain two outcomes an attacker may aim for with a Buffer overflow attack. Sketch how and why a Buffer overflow attack works. You do not need to write code but can if it helps you to explain. 6) Explain what a Trojan Horse is. Describe two distinct methods of identifying a Trojan Horse and explain when and why each of those methods might be appropriate. 7) What is a honeypot? What role might it play in the detection and management of intrusions? Give an example to illustrate how particular data within a real system might be considered to be a honeytoken.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

First, argue for the best information security practice, whether a block cipher or stream cipher should be used to encrypt a video data file sent through the internet as part of a major, successful entertainment service. The entertainment company has a large market share, and ample resources. Secondly, argue for the most secure choice of which kind of cipher should be used for the authentication exchange between the user and the entertainment service web portal. The entertainment service is expensive to the customer, and users are wary of the misuse of their accounts. Consider the nature of the traffic and its pattern, and the nature of the keys to use.
The distinction between a network intrusion detection system (NIDS) and a network intrusion prevention system (NIPS) is as follows: NIPS can react to an assault far faster than other types of defenses. Attacks are more useful when they are detected by an NIDS. b Because it makes use of protocol analysis, an NIPS is considerably slower. Due to the fact that NIDS and NIPS are both equal, there is no difference.
1) Describe the difference(s) between an authenticated user and an authorised user. 2) Describe three distinct types of attacks against password systems. Briefly discuss appropriate countermeasures against one of those types of attacks. 3) Explain two outcomes an attacker may aim for with a Buffer overflow attack. Sketch how and why a Buffer overflow attack works. You do not need to write code but can if it helps you to explain. 4) Explain what salting is, where we use it, and why we use it. 5) Briefly describe how an encrypted virus works. 6) Describe two primary properties used in malware classification and two distinct methods of identifying a virus. 7) Describe how honeypots can be used in an intrusion detection system.
a. What properties should a digital signature have? b. In what order should the signature function and the confidentiality function be applied to a message, and why? c. What happens if a K value used in creating a DSA signature is compromised? d. What is the difference between transport mode and tunnel mode? e. What is a replay attack?
Access Control Lists (ACLs) are used by firewalls (ACL). Explain what an ACL is and what it's usual contents look like. Explain what the word "salt" means in the context of cryptography and why it is used. You should go over how it is used to make it more difficult to break passwords and how it is implemented.
Explain the concept of a "man-in-the-middle" attack in the context of encryption.
What defenses are possible against nonspoofed flooding attacks? Can such attacks be entirely prevented?
Try to find a distributed denial of service (DDoS) attack that occurred during the last three years. It is now time to examine the attack's timeframe and methods. Explain!
Computer Science With respect to firewalls, what is the difference between default accept anddefault deny policies? When is one more appropriate than the other?
Describe in depth with the aid of a diagram what a Distributed Denial of Service (DDoS) attack is. Give the steps that could be followed by the banks in the event of the DDoS assault on their systems.
My understanding of multifactor authentication is limited. What kind of security does it provide for passwords?
A hypothetical scenario where the management of login credentials is necessary could be a large corporation that has multiple departments and employees with varying levels of access to sensitive information. In order to maintain security and prevent unauthorised access, the company would need to implement a system for managing login credentials. This would involve assigning unique usernames and passwords to each employee, as well as establishing protocols for resetting passwords and revoking access when necessary. Additionally, the company may choose to implement two-factor authentication or other security measures to further protect sensitive data. Identify and analyse the different authentication techniques that are currently accessible. Is the utilisation of a password mandatory in all instances?