Find an application in which a reliable Information Management System is needed. We must collect extremely sensitive information from our consumers and store it in our system. These details are submitted to us in electronic format. Even from ourselves, we must protect our consumers' secrecy; we must not see the information they present to us, otherwise the confidentiality will be jeopardised. As an information security officer, the duty is to double-check the validity of sensitive documents before storing them with the proper users. You have no access to the users' usernames and passwords, which you can save but not recover until the user gives you permission. Second, even though the whole database is compromised or robbed, you must encrypt the passwords and usernames to make it difficult for everyone (including server administrators) besides the users to access them. Which cryptographic mechanisms, based on your knowledge of computer security, would you enforce in order to operate the system as needed, and why? Explain how to use the preferred mechanism.

Computer Networking: A Top-Down Approach (7th Edition)
7th Edition
ISBN:9780133594140
Author:James Kurose, Keith Ross
Publisher:James Kurose, Keith Ross
Chapter1: Computer Networks And The Internet
Section: Chapter Questions
Problem R1RQ: What is the difference between a host and an end system? List several different types of end...
icon
Related questions
Question

Find an application in which a reliable Information Management System is needed.

We must collect extremely sensitive information from our consumers and store it in our system. These details are submitted to us in electronic format. Even

from ourselves, we must protect our consumers' secrecy; we must not see the information they present to us, otherwise the confidentiality will be jeopardised. As an information security officer, the duty is to double-check the validity of sensitive documents before storing them with the proper users. You have no access to the users' usernames and passwords, which you can save but not

recover until the user gives you permission.

Second, even though the whole database is compromised or robbed, you must encrypt the passwords and usernames to make it difficult for everyone

(including server administrators) besides the users to access them.

Which cryptographic mechanisms, based on your knowledge of computer

security, would you enforce in order to operate the system as needed, and why?

Explain how to use the preferred mechanism.

Expert Solution
steps

Step by step

Solved in 2 steps

Blurred answer
Recommended textbooks for you
Computer Networking: A Top-Down Approach (7th Edi…
Computer Networking: A Top-Down Approach (7th Edi…
Computer Engineering
ISBN:
9780133594140
Author:
James Kurose, Keith Ross
Publisher:
PEARSON
Computer Organization and Design MIPS Edition, Fi…
Computer Organization and Design MIPS Edition, Fi…
Computer Engineering
ISBN:
9780124077263
Author:
David A. Patterson, John L. Hennessy
Publisher:
Elsevier Science
Network+ Guide to Networks (MindTap Course List)
Network+ Guide to Networks (MindTap Course List)
Computer Engineering
ISBN:
9781337569330
Author:
Jill West, Tamara Dean, Jean Andrews
Publisher:
Cengage Learning
Concepts of Database Management
Concepts of Database Management
Computer Engineering
ISBN:
9781337093422
Author:
Joy L. Starks, Philip J. Pratt, Mary Z. Last
Publisher:
Cengage Learning
Prelude to Programming
Prelude to Programming
Computer Engineering
ISBN:
9780133750423
Author:
VENIT, Stewart
Publisher:
Pearson Education
Sc Business Data Communications and Networking, T…
Sc Business Data Communications and Networking, T…
Computer Engineering
ISBN:
9781119368830
Author:
FITZGERALD
Publisher:
WILEY