Questions

Kerberos Tickets

The Kerberos authentication process actually involves two tickets. Explain the need for each ticket and why only one ticket cannot be used.

8 Views • 1 Answers

computer science computer security networking computer networking security

Four Access Methods and Their Weaknesses

Discuss four access methods, giving the weaknesses of each

7 Views • 1 Answers

computer science networking computer security computer networking security

Devise a plan to compute the cost of computer crime.

8 Views • 1 Answers

computer science networking computer security computer networking security

Web authorization and performance

Web authorization is central to the security of all Web applications. What is the best way to safeguard all Web applications and at the same time make Web access reliable and fast?

7 Views • 1 Answers

computer science networking computer security computer networking security

Benefits of Authorization

What are the benefits of authorization?

8 Views • 1 Answers

computer science networking computer security computer networking security

Security Policies

Some security experts do not believe in security policies. Do you? Why or why not?

8 Views • 1 Answers

security computer networking computer science networking computer security

Insider Abuse Solutions

Insider abuse is a major crime category. Discuss ways to solve it.

9 Views • 1 Answers

computer science networking computer networking security computer security

Reasons for Anonymous Authentication in High-Security Systems

There are many compelling reasons why a system that must implement security to the maximum must give anonymous authentication to a class of users. Detail five of these reasons.

8 Views • 1 Answers

computer networking networking computer security security computer science

Script Security Threat: Untrusted Data

The biggest script security threat has always been the acceptance of untrusted data. What is the best way for scripts to accept data and preserve the trust?

7 Views • 1 Answers

computer science networking computer networking security computer security

Social engineering has been frequently cited as a source of network security threat. Discuss the different elements within social engineering that contribute to this assertion.

8 Views • 1 Answers

security computer networking computer science networking computer security

Authentication Policy Involvement

Making an authentication policy must be a well-kept secret to ensure the security of the intended system. Why then is it so important that a security policy include an authentication policy that involves as many as possible? What kind of people must be left out?

7 Views • 1 Answers

computer science computer security networking computer networking security

Why is crime reporting so low in major industries?

7 Views • 1 Answers

computer science networking computer networking security computer security

Discuss the politics of dealing with hacktivism.

7 Views • 1 Answers

security computer networking computer science networking computer security

CGI and Web Programming Revolution

How did CGI revolutionize Web programming?

8 Views • 1 Answers

computer science networking computer networking security computer security

Differentiate between access and authorization.

7 Views • 1 Answers

computer science networking computer security computer networking security

Firewall Design for File Uploads to Internal Network

How would you design a firewall that would let Internet-based users upload files to a protected internal network server?

8 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Client-side vs. Server-side Scripting Security

In terms of security, is client-side scripting better than server-side scripting? Why or why not?

7 Views • 1 Answers

computer science networking computer networking security computer security

Access Privileges in Computing Systems

List and discuss the most common access privileges in a computing system.

7 Views • 1 Answers

computer science networking computer security computer networking security

Network Vulnerability Identification

Is it possible to locate all vulnerabilities in a network? In other words, can one make an authoritative list of those vulnerabilities? Defend your response.

9 Views • 1 Answers

security computer networking computer science networking computer security

Global Privilege in Authorization Systems

Discuss the concept of global privilege. Does it work well in a distributed authorization or centralized authorization?

7 Views • 1 Answers

computer science networking computer security computer networking security

Firewall Protocol Implementation

Show how data protocols such as TCP, UDP, and ICMP can be implemented in a firewall and give the type of firewall best suited for each of these protocols.

9 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Why are system intrusions dangerous?

8 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Kerberos Authentication Process Players

Discuss in detail the role played by each one of the five players in a Kerberos authentication process.

7 Views • 1 Answers

computer science networking computer security computer networking security

Three-way Handshake as a Security Threat

Give a detailed account of why the three-way handshake is a security threat.

7 Views • 1 Answers

computer science networking security computer networking computer security

Increase in Virus and Worm Attacks

There seems to have been an increase in the number of reported virus and worm attacks on computer networks. Is this really a sign of an increase, more reporting, or more security awareness on the part of the individual? Comment on each of these factors.

9 Views • 1 Answers

computer science networking security computer networking computer security

Discuss the risks to the protected internal network as a result of a DMZ

10 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Network Layer Security Mechanisms and Efficacy

IPsec provides security at the network layer. What other security mechanism is applicable at the network layer? Do network layer security solutions offer better security?

7 Views • 1 Answers

networking security computer networking computer science computer security

Discuss the differences between a firewall and a packet filter

10 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Why is hacking a big threat to system security?

7 Views • 1 Answers

security computer networking computer science networking computer security

RPC Authentication: Per-Request Authentication

In RPC authentication, why it is necessary that each client request that server services be authenticated by the authentication server?

7 Views • 1 Answers

computer science networking computer security computer networking security

Security Threat: Human Factors

What is the best way to deal with the security threat due to human factors?

7 Views • 1 Answers

computer science networking computer security computer networking security

Is hacking getting under control?

Following the history of hacking, can you say that hacking is getting under control? Why or why not?

7 Views • 1 Answers

security computer networking computer science networking computer security

Sources of System Vulnerabilities

Discuss the sources of system vulnerabilities.

8 Views • 1 Answers

computer science networking computer networking security computer security

Too Much Authorization and Least Privilege

With the principle of “least privilege,” is it possible to have too much authorization? What happens when there is too much authorization?

6 Views • 1 Answers

computer science networking computer security computer networking security

Three Components of a Global Access Model

Discuss the three components of a global access model

7 Views • 1 Answers

computer science networking computer security computer networking security

Physical Access Restrictions

Physical access to resources is essential and must be the most restricted. Why?

7 Views • 1 Answers

computer science networking computer security computer networking security

Anonymous Authentication and System Security

Does anonymous authentication compromise the security of systems for the advantages of a few services?

8 Views • 1 Answers

computer science networking computer security computer networking security

Application Layer Security Mechanisms

Discuss two security mechanisms applied at the application layer. Are they safer than those applied at the lower network layer?

7 Views • 1 Answers

networking security computer networking computer science computer security

Are IDSs similar to firewalls?

7 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Client-side vs. Server-side Scripting

What are the differences between client-side and server-side scripting? Is one better than the other?

7 Views • 1 Answers

computer science networking computer networking security computer security

Effective Legislation Against Hacking

What kind of legislation can be effective to prevent hacking?

7 Views • 1 Answers

computer science networking computer networking security computer security

Does information confidentiality infer information integrity?

Does information confidentiality infer information integrity? Explain your response.

8 Views • 1 Answers

networking security computer networking computer science computer security

Honeypot Placement without DMZ

For a system without a DMZ, where is the best area in the network to install a honeypot?

8 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Comparison of Authorization Models: NOS vs. Stand-alone OS

Compare the authorization model used by the network operating systems (NOSs) to that used by the old stand-alone operating systems

7 Views • 1 Answers

computer science networking computer security computer networking security

Discuss the major sources of computer crimes.

7 Views • 1 Answers

computer science networking computer security computer networking security

Discuss the best approaches to implementing an effective IDS.

8 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Software Verification and Validation (V&V) in System Vulnerability

Part of the problem in design flaws involves issues associated with software verification and validation (V&V). What is the role of V&V in system vulnerability?

7 Views • 1 Answers

security computer networking computer science networking computer security

Outline and discuss the factors that influence threat information quality

7 Views • 1 Answers

security computer networking computer science networking computer security

Discuss the role of digital signatures in modern communication

7 Views • 1 Answers

networking security computer science computer networking cryptography computer security

Security Standards Adaptation

Security standards are changing daily. Is it wise to pick a security standard then? Why or why not?

9 Views • 1 Answers

computer science networking security computer networking computer security

Differentiate between computer and network forensics.

8 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Discuss the advantages of using an application-level firewall over a network-level firewall.

7 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Virtual Security

Virtual security seems to work in some systems. Why is this so? Can you apply it in a network environment?

8 Views • 1 Answers

security networking computer science computer networking computer security

CGI and Database Security

CGI is often used to manage extensive databases. Databases store sensitive information. Discuss security measures you can use to safeguard the databases.

7 Views • 1 Answers

computer networking networking computer security security computer science

Comment on the statement regarding CAs and IPsec.

Some say that with the development of systems such as IPsec, the role the CAs play in modern communication will diminish and eventually cease. Comment on this statement.

7 Views • 1 Answers

networking security computer science computer networking cryptography computer security

CGI Scripting and Security

CGI is also used in discussions allowing users to talk to the customer and back. CGI helps in creating an ongoing dialog between multiple clients. Discuss the security implications of dialogs like this.

6 Views • 1 Answers

computer science networking computer networking security computer security

Importance of Security Plans

Why it is important to have a security plan despite the various views of security experts concerning its importance?

6 Views • 1 Answers

computer science networking security computer networking computer security

Discuss the future of PKI

6 Views • 1 Answers

networking security computer science computer networking cryptography computer security

Security Mechanisms for Confidentiality

What are the best security mechanisms to ensure information confidentiality?

6 Views • 1 Answers

networking security computer networking computer science computer security

Firewall Services and Protocols

Search and discuss as many services and protocols as possible offered by a modern firewall.

10 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Computer Network Fundamentals: Encryption Standards Security

Most of the encryption standards that are being used such as RSA and DES have not been formally proven to be safe. Why then do we take them to be secure—what evidence do we have?

6 Views • 1 Answers

networking security computer networking computer science computer security

Transport Layer Security Mechanisms

Are there security mechanisms applicable at transport layer? Is it safer?

6 Views • 1 Answers

networking security computer networking computer science computer security

Differences between Digital Certificates and Digital Signatures in Authentication

Discuss the differences between digital certificates and digital signatures in authentication

8 Views • 1 Answers

networking security computer science computer networking cryptography computer security

Why was VBScript not very popular?

6 Views • 1 Answers

computer science networking computer networking security computer security

List and discuss the types of hacker crimes.

6 Views • 1 Answers

computer science networking computer networking security computer security

Authentication using certificates, although considered safe, suffers from weaknesses. Discuss these weaknesses using specific examples.

6 Views • 1 Answers

computer science networking computer security computer networking security

System Intrusion Detection and Prevention

Discuss as many effective ways of responding to a system intrusion as possible. What are the best? Most implementable? Most cost-effective?

6 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Merits and Demerits of Centralized and Decentralized Authorization

Discuss the merits and demerits of centralized and decentralized authorization.

6 Views • 1 Answers

computer science networking computer security computer networking security

Circuit-Level vs. Network-Level Firewalls

What are circuit-level firewalls? How are they different from network-level firewalls?

6 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Security Best Practices and Mechanisms

Security best practices are security guidelines and policies aimed at enhancing system security. Can they work without known and proven security mechanisms?

9 Views • 1 Answers

networking security computer networking computer science computer security

Access Control: Least Privilege Principle

Discuss the benefits and problems resulting from the “least privilege” principle often used in access control.

7 Views • 1 Answers

computer science networking computer security computer networking security

Kerberos and SSL are additional layers to enhance authentication. Detail how these enhancements are achieved in both cases.

6 Views • 1 Answers

computer science networking computer security computer networking security

Discuss ways a system administrator can reduce system scanning by hackers.

6 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Discuss any security surveillance system.

6 Views • 1 Answers

computer science networking computer security computer networking security

Choosing and Using Security Best Practices

If you are an enterprise security chief, how would you go about choosing a security best practice? Is it good security policy to always use a best security practice? What are the benefits of using a best practice?

7 Views • 1 Answers

computer science networking security computer networking computer security

Why are vulnerabilities difficult to predict?

6 Views • 1 Answers

computer science networking computer networking security computer security

Discuss a good security auditing system.

6 Views • 1 Answers

computer science networking computer security computer networking security

Discuss the benefits of system scanning.

6 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Discuss the basic components of cryptography

6 Views • 1 Answers

computer science computer security security networking computer networking cryptography

Discuss the weaknesses of symmetric encryption

6 Views • 1 Answers

computer science computer security security networking computer networking cryptography

Discuss the limitations of firewalls. How do modern firewalls differ from the old ones in dealing with these limitations?

7 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Describe the message authentication process using:

Describe the message authentication process using: (a) Symmetric encryption (b) Public key encryption (c) Hash function

6 Views • 1 Answers

networking security computer science computer networking cryptography computer security

Difficulties in Enforcing Security Best Practices

Discuss the difficulties encountered in enforcing security best practices.

6 Views • 1 Answers

computer science networking security computer networking computer security

Discuss the difficulties faced by cybercrime investigators.

6 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Why is it difficult to implement distributed authorization?

6 Views • 1 Answers

computer science networking computer security computer networking security

Discuss the role of certificate authentication in e-commerce

6 Views • 1 Answers

computer science networking computer security computer networking security

Access Control and Authorization: Denying Document with Extended Links

Consider an environment where each server does its own authorization. If an access request is made to a document that has extended links and one of the link requests is denied, should the whole document request be denied? Why or why not?

6 Views • 1 Answers

computer science networking computer security computer networking security

Scripting and Security in Computer Networks and Web Browsers

The most common CGI function is to fill in forms; the processing script actually takes the data input by the Web surfer and sends it as e-mail to the form administrator. Discuss the different ways such a process can fall victim to an attacker.

6 Views • 1 Answers

computer science networking computer networking security computer security

Discuss three approaches of acquiring information needed to penetrate a network.

6 Views • 1 Answers

networking firewalls security computer science computer networking cryptography computer security

Why is PKI so vital in modern communications?

6 Views • 1 Answers

networking security computer science computer networking cryptography computer security

Compare or discuss the differences between any two security systems.

9 Views • 1 Answers

computer science networking computer security computer networking security

Is it possible to implement full distributed authorization? What will be involved?