Q(1).In this scenario, College of Applied Science arranged a host intheir network which is acting as a router to forward the packetsbetween the networks . But unfortunately there was a major securitybreach that had exposed the personal data of students. Later Collegeof Applied Sciences understood that the host which is acting as arouter is more vulnerable to attack as it attracts the hackers to reachthe internal network. . Unfortunately, some of student details werechanged or deleted. College of Applied Science asked you to suggestbetter security strategya. Identify any two security goals not maintained in the abovescenario.b. Identify the firewall architecture for the above mentioned scenario.e. Identify which security strategy the above given scenario breaches?a. Identifies any two appropriate uses for this type of firewallArchitecture?

Security goals not maintained in the above scenario Protection of Confidentiality of dataData…

Answered: Q(1).In this scenario, College of…

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

Scenario 2 An organization dedicated to reducing spam tries to get Internet service providers (ISPS) in an East Asian country to stop the spammers by protecting their mail servers. When this effort is unsuccessful, the anti-spam organization puts the addresses of these ISPS on its "black list." Many ISPS in the United States consult the black list and refuse to accept email from the blacklisted ISPS. This action has two results. First, the amount of spam received by the typical email user in the United States drops by 25 percent. Second, tens of thousands of innocent computer users in the East Asian country are unable to send email to friends and business associates in the United States. Questions 1. Did the anti-spam organization do anything wrong? 2. Did the ISPS that refused to accept email from the black listed ISPS do anything wrong? 3. Who benefited from the organization's action? 4. Who was hurt by the organization's action? 5. Could the organization have achieved its goals…
The security scheme for IEEE 802.11, prior to 11i, was Wired Equivalent Privacy (WEP). WEP assumed all devices on the network share a security key. The purpose of the authentication scenario is for the STA to prove that it possesses the security key. Authentication proceeds as shown in Figure 24.13 What are the benefits of the authentication scheme? The authentication scheme is incomplete. What is missing and why is it important? What is a cryptographic weakness of this scheme?
The distinction between a network intrusion detection system (NIDS) and a network intrusion prevention system (NIPS) is as follows: NIPS can react to an assault far faster than other types of defenses. Attacks are more useful when they are detected by an NIDS. b Because it makes use of protocol analysis, an NIPS is considerably slower. Due to the fact that NIDS and NIPS are both equal, there is no difference.
Suppose a user employs one-time passwords as above (or, for that matter, reusable passwords), but that the password is transmitted sufficiently slowly. (a) Show that an eavesdropper can gain access to the remote server with a relatively modest number of guesses. (Hint: The eavesdropper starts guessing after the original user has typed all but one character of the password.) (b) To what other attacks might a user of one-time passwords be subject?
Design a network with IDS (any type(s)), IPS, NAT, router, switch, firewall,antivirus. The network consist of a server and 3 or more host computers(LAN) connected through internet. Show with the help of a neat diagramhow the connection is secured from various attacks using the key-types
A hypothetical scenario where the management of login credentials is necessary could be a large corporation that has multiple departments and employees with varying levels of access to sensitive information. In order to maintain security and prevent unauthorised access, the company would need to implement a system for managing login credentials. This would involve assigning unique usernames and passwords to each employee, as well as establishing protocols for resetting passwords and revoking access when necessary. Additionally, the company may choose to implement two-factor authentication or other security measures to further protect sensitive data. Identify and analyse the different authentication techniques that are currently accessible. Is the utilisation of a password mandatory in all instances?
Suppose an organization uses a secure VPN to securelyconnect its sites over the Internet. Jim, a user in theorganization, uses the VPN to communicate with his boss,Mary. Describe one type of communication between Jim andMary which would not require use of encryption or othersecurity mechanism, and another type of communication which would require encryption or other security mechanisms. Please explain your answer.
Consider a company whose operations are housed in two buildings on the same property, one building is headquarters, the other building contains network and computer services. The property is physically protected by a fence around the perimeter. The only entrance to the property is through the fenced perimeter. In addition to the perimeter fence, physical security consists of a guarded front gate. The local networks are split between the Headquarters’ LAN and the Network Services’ LAN. Internet users connect to the Web server through a firewall. Dial-up users get access to a particular server on the Network Services’ LAN. Develop an attack tree in which the root node represents disclosure of proprietary secrets. Include physical, social engineering, and technical attacks. The tree may contain both AND and OR nodes. Develop a tree that has at least 15 leaf nodes.
What happens if an attacker tries to tamper with the Tag (the MAC) and the ciphertext while they are in transit when a message authentication code (MAC) is being used? Give an explanation as to why this attack can never be successful, given that the ability of the target to identify a tampered Tag/ciphertext ensures that it will succeed every time.
Assuming that one of the attacks used to defraud Zambian banks was a DDoS attack, describe in depth with the aid of a diagram what a Distributed Denial of Service (DDoS) attack is. Give the steps that could be followed by the banks in the event of the DDoS assault on their systems
Give examples of each (a) a multifactor authentication requirement, (b) a multimodal authentication requirement, and (c) a physical access control.
Assuming successful authentication, which of our objectives would be the most probable to be accomplished with its aid? The present article aims to conduct a comparative analysis of the advantages and disadvantages associated with diverse authentication protocols.

SEE MORE QUESTIONS

Recommended textbooks for you

Database System Concepts

Computer Science

ISBN:

9780078022159

Author:

Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:

McGraw-Hill Education

Starting Out with Python (4th Edition)

Computer Science

ISBN:

9780134444321

Author:

Tony Gaddis

Publisher:

PEARSON

Digital Fundamentals (11th Edition)

Computer Science

ISBN:

9780132737968

Author:

Thomas L. Floyd

Publisher:

PEARSON

Database System Concepts

Computer Science

ISBN:

9780078022159

Author:

Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:

McGraw-Hill Education

Starting Out with Python (4th Edition)

Computer Science

ISBN:

9780134444321

Author:

Tony Gaddis

Publisher:

PEARSON

Digital Fundamentals (11th Edition)

Computer Science

ISBN:

9780132737968

Author:

Thomas L. Floyd

Publisher:

PEARSON

C How to Program (8th Edition)

Computer Science

ISBN:

9780133976892

Author:

Paul J. Deitel, Harvey Deitel

Publisher:

PEARSON

Database Systems: Design, Implementation, & Manag…

Computer Science

ISBN:

9781337627900

Author:

Carlos Coronel, Steven Morris

Publisher:

Cengage Learning

Programmable Logic Controllers

Computer Science

ISBN:

9780073373843

Author:

Frank D. Petruzella

Publisher:

McGraw-Hill Education

SEE MORE TEXTBOOKS