Please do not duplicate with orders 38670 & 38673
Security fundamentals
Task
You have to reference the text book and any additional material you have used in your answers in APA style..
Answers MUST be written in your own words. If an answer contains more than 10% direct quote (referenced or unreferenced), 0 marks will be awarded for this question. One or two sentence answers will be too short and only receive low marks. Answers longer than 1 pages (12 point font, single line spacing) may incur a penalty if too much non-relevant information is stated. For mathematical questions it is expected that you show intermediate steps of your working. Just stating the correct solution will result in low marks, on the other hand if the working is correct and you only made minor mistakes, you will still be awarded marks, even though the final answer is wrong.
Question 1 [5 Marks]
Automated Teller Machines (ATM) are designed so that users will provide a personal identification number (PIN) and a card to access their bank accounts. Give examples of confidentiality, integrity and availability requirements associated in such a system and describe the degree of importance for each requirement.
Answer should include (How ATM preserve confidentiality, integrty and availiability.
Which is important: all degree of importance among them?
Question 2 [5 Marks]
A thief broke into an Automated Teller Machine (ATM) using a screwdriver and was able to jam the card reader as well as breaking five keys from the keypad. The thief had to halt the process of break-in and hide, as a customer approached to use the ATM. The customer was able to successfully enter their ATM card, punch in the 4 digit PIN and was able to draw out some cash. Since the card reader was jammed, the customer was however not able to withdraw the ATM card, and drove off to seek some help. In the meantime, the thief came back and decided to try to discover the customer’s PIN so that he can steal money from the customer. You are required to calculate the maximum number of PINs that the thief may have to enter before correctly discovering the customer’s PIN?
Question 3 [5 Marks]
Thinking about bio-metric authentication, list three reasons why people may be reluctant to use bio-metrics. Describe various ways of how to counter those objections.
Question 4 [5 Marks]
In bio-metric authentication, false positive and false negative rates can be tuned according to the requirement, and they are often complementary i.e. raising one lowers the other. Describe two circumstances where false negatives are significantly more serious than false positives.
Question 5 [10 Marks]
Jack is a successful lawyer who runs a law firm that deals with sensitive cases. In 2017, after
the widely known ransomware attacks, their data was compromised. As a protective
measure, he requested that all employees must encrypt their messages to each other.
Employees generally exchange instructions or case updates with messages that are no
longer than thirty characters each. For the purpose of hiding the meaning of the messages,
they were told to encrypt them using Caesar cipher substitution then using another
substitution where the key is 567. Once the message is processed through the
aforementioned methods, they added an extra layer of security by encrypting the message
with One Time Pad that increments by one each time it’s used but remains less or equals to
15 for encryption and decryption. For one particular message between two employees, that
key was:
7,15,12,6,8,9,4,2,1,13,12,5,3,1,8,15,6,4,8,12,8,10,9,14,6,11,13,2,4,6
When the receiver received the message, he/she received the following ciphertext:
LC DOMX IZY XVHP XMJQSH AANW FIHABRT
What is the plaintext?
Rationale
Be able to justify security goals and the importance of maintaining the secure computing environment against digital threats.
Be able to explain the fundamental concepts of cryptographic algorithms.
Be able to examine malicious activities that may affect the security of a computer program and justify the choice of various controls to mitigate threats.
Be able to compare and contrast foundational security policies and models that deal with integrity and confidentiality.
Marking criteria and standards
Question1 : In depth use of a good range of relevant literature to address the points. Provides an extensive range of examples of the CIA triad with sound evidence of synthesis of own research and prescribed readings in topics.
Question 2: The answer is correct with a complete, clear, and detailed step-by-step working provided of how the answer was calculated.
Question 3: Clear, comprehensive description of biometric authentication and why general population may object to using this technique. Critical points identified & discussed.
Question 4: Clear, comprehensive description discussion of two circumstances where false negatives are significantly more serious than false positives in biometric authentication listing all critical points.
Question 5:Correct identification of how to quickly identify if transposition techniques have been used. Correct decryption of the message has been provided along with a clear, concise and step by step explanation of the decryption technique used.