plz answer these questions. Thx for u 1. Develop an attack tree for gaining access to customer account details from thedatabase of a bank.2. You are a junior IT executive at your department dealing with the DES encryptionkey. From the random key generator, you are given the secret key(EOE0E0E0F1F1F1F1)hex to encrypt a message.i.What is the output of the key after it is applied with the parity bit drop processbox in Figure 1? At this point, is it a strong or weak key? Please state yourreason.Using the key-permutation compression 2 from Figure 2, decide whether thisis a strong or weak key. Justify your answer.ii.57494133251709015850423426181002595143352719036052443663554739312315076254463830221406615345372921130528201204Figure 1: Parity bit drop1417240105032815062110231912042608160727201302415231374755304051453348444939563453464250362932Figure 2: Key-Permutation Compression 2

An attack tree for gaining access to customer account details from the database of a bank.

Answered: 1. Develop an attack tree for gaining…

Engineering

Computer Science

1. Develop an attack tree for gaining database of a bank. access to customer account details from the

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Related questions

Q: Consider a possible bank robbery. How does the bank prevent future intrusions, recognise those that…

A: Introduction: A network intrusion detection system (NIDS) is vital for network security since it…

Q: An authentication challenge-response mechanism should be shown. With password protection, how much…

A: Start: A question and a response are required to validate a dubious response.The challenge or…

Q: Create a fictitious login management situation. Determine multiple methods of authentication.…

A: Password authentication is a method that involves the user entering a unique ID and key that is then…

Q: The operation of an authentication challenge–response system should be described. Although it seems…

A: What are the chances that the challenge answer is correct: In its most basic form, verification of a…

Q: 6.3 Consider the following threats to Web security and describe how each is countered by a…

A: As per policy, first three parts are answered.

Q: Is the outcome of an attack.

A: Answer to the given question: Attacks can cause electrical power outages, disappointment of military…

Q: Is it possible to negate access control by taking particular steps?

A: Answer: I have given answered in the brief explanation

Q: The notion of challenge–response authentication must be understood. In what way is it more secure…

A: Challenges in Security Authentication: 4 Problems with User Authentication That Developers and…

Q: Consider the scenario where the hacker makes a phone call to the customer and trying to pretend that…

A: This scenario depicts a scene of social engineering attack which involves fooling people and getting…

Q: Specify a scenario in which one of the four possible access control techniques may be put into…

A: The four access control methods might be used:

Q: In a general sense, "security" is a. protection from only direct actions b. using reverse attack…

A: To be determine: Choose right option

Q: Differentiate hash from MAC. Demonstrate how they may be used to verify communications. What…

A: Make a distinction between hash and MAC. Describe how they may be utilized for message…

Q: Give an example of a ubiquitous security infrastructure risk in at least a paragraph.

A: Definition A system from which the computer has vanished and has been supplanted by a multitude of…

Q: gaining

A: Attack Trees provide a formal, methodical way of describing the security of systems, based on…

Q: Allow me to describe distributed denial-of-service attacks in the event that you are not acquainted…

A: Security threat is any negative event that can lead to unwanted impact to a computer system possibly…

Q: Provide a fictional example of login management. Consider a range of user authentication methods. Is…

A: Scenario management is a very effective technique for managing numerous futures and creating…

Q: Give specific instances of session hijacking techniques. Such attacks require a robust defence

A: Let's understand in deep about session hijacking and it's methods.

Q: In brute force attack, on average half of all possible keys must be tried to achieve success. i)…

A: Question. In brute force attack, on average half of all possible keys must be tried to achieve…

Q: Separate authentication and accountability.

A: The above question is solved in step 2 :-

Q: What exactly is a tracker attack? Make use of an acceptable example to demonstrate tracker attacks.

A: A tracker attack is when an attacker uses many aggregate searches to isolate an individual.

Q: What is a recursive cross-site scripting attack?

A: Introduction: When an attacker injects executable browser code within a single HTTP response, this…

Q: An attacker sits between customer and Banker, and captures the information from the customer and…

A: Answer: This attack is called Explanation: The attack may well be winning just by resending the…

Q: Both explain what a brute force assault is and why admin/root accounts are vulnerable.

A: Introduction: Both explain what a brute force assault is and why admin/root accounts are vulnerable.

Q: Assume the designer of an online banking system created a secret function that gives him account…

A: Intro Due to the fact that the application was disguised and triggered only when the account balance…

Q: Why is polymorphism seen as more dangerous than regular malware? What effect does it have on…

A: Introduction: Let we begin by discussing polymorphism: Polymorphism: The offering of a single…

Q: Assume that the developer of an online banking software system added a secret mechanism that gives…

A: We are given a situation where developer of an online banking software system added a secret…

Q: Threats - Explore the classic ARP poisoning attack. What the mitigating strategies to defend…

A: Given: What are the mitigating strategies to defend against it? The solution is given below for…

Q: Describe a fictitious situation involving login management. List as many unique authentication…

A: Credentials Over Unencrypted ChannelIf the application accepts the credentials and logs in a user…

Q: Describe two distinct types of attack against password systems and the countermeasures against each…

A: Actually, given information regarding types of attack.

Q: Is it feasible to circumvent access control by taking certain steps?

A: Introduction Is it feasible to circumvent access control by taking certain steps?

Q: In both cases, what is a brute force assault and why are admin/root accounts vulnerable to brute…

A: A brute force attack is a method of infiltrating an authentication system and successfully logging…

Q: 1. What are the differences between passive attack and active attack?

A: 1. What are the differences between passive attack and active attack? NOTE: *Multiple questions*…

Q: vi. write some difference between Authorization and Authentication in Web testing.

A: difference between Authorization and Authentication in Web testing: Authorisation: Authorization is…

Q: Provide an example of a fictitious login management situation. Identify a number of different…

A: Provide an example of a fictitious login management situation. Identify a number of different…

Q: Describe a fictitious situation involving login management. List as many distinct authentication…

A: INTRODUCTION: Inspection: Scenario management is a very successful strategy for managing several…

Q: What is the difference between active attacks and passive attacks?

A: Security assaults are classified as active and passive. In an active attack, the attacker attempts…

Q: mpares it to

A: Bob hashes the password Alice submits and thinks about it to a database of hashed passwords. A solid…

Q: DDoS attacks have been used as a distraction for other activities, using the web, can you explain a…

A: Answer: I have given answered in the brief explanation

Q: Investigate access control via authentication and authorisation settings on an exemplar

A: The process of authenticating someone's identity is known as authentication. Biometrics, such as…

Q: What is the definition of salt? How does salt defend against brute force assaults?

A: Intro Hydraulic mining (or solution mining) of salt involves pumping water under the earth's surface…

Q: Assume the creator of an online banking system has developed a hidden function that sends him…

A: Due to the fact that the application was disguised and triggered only when the account balance…

Q: Distinguish between authentication and accountability.

A: - We need to highlight the differences between authentication and accountability.

Q: Provide a solution to the problem described below by identifying the security flaws in each…

A: Intro Bob hashes the password Alice submits and thinks about it to a database of hashed passwords.…

Q: Describe a made-up scenario involving the administration of logins. Determine a variety of various…

A: Introduction: Phishing assaults are a sort of cyber-attack that takes a user's credentials and uses…

Q: Allow me to describe distributed denial-of-service attacks in the event that your are not acquainted…

A: Given: DDoS assaults are a Do's attack. A DDoS attack uses a botnet to overload a target website…

Q: 1. Describe the steps of the Existential Forgery Attack against RSA Digital Signature as discussed…

A: In a system, digital signature forgery is the ability to create a pair consisting of a message,…

Q: Investigate the relationship between malware of all varieties and computer and network security. Is…

A: Introduction A user must protect the computer system against threats like viruses and unauthorised…

Q: Consider a probable scenario involving the management of logins. Take note of the many techniques…

A: Scenario management: Scenario management helps handle several futures and generate…

Q: An operating system can implement a controlled security environment by controlling sharing through…

A: The operating system is responsible for implementing the security which is making sure of the…

Question

plz answer these questions. Thx for u

1. Develop an attack tree for gaining access to customer account details from the
database of a bank.
2. You are a junior IT executive at your department dealing with the DES encryption
key. From the random key generator, you are given the secret key
(EOE0E0E0F1F1F1F1)hex to encrypt a message.
i.
What is the output of the key after it is applied with the parity bit drop process
box in Figure 1? At this point, is it a strong or weak key? Please state your
reason.
Using the key-permutation compression 2 from Figure 2, decide whether this
is a strong or weak key. Justify your answer.
ii.
57
49
41
33
25
17
09
01
58
50
42
34
26
18
10
02
59
51
43
35
27
19
03
60
52
44
36
63
55
47
39
31
23
15
07
62
54
46
38
30
22
14
06
61
53
45
37
29
21
13
05
28
20
12
04
Figure 1: Parity bit drop
14
17
24
01
05
03
28
15
06
21
10
23
19
12
04
26
08
16
07
27
20
13
02
41
52
31
37
47
55
30
40
51
45
33
48
44
49
39
56
34
53
46
42
50
36
29
32
Figure 2: Key-Permutation Compression 2

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

This is a popular solution!

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Trending now

This is a popular solution!

Step by step

Solved in 2 steps with 1 images

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.

Similar questions

1.Suppose Alice sent the following secret message: 001000000100100100111001001010000011101000111010 The decryption key was discovered to be: 01101001Decrypt the message into plain text.. 2.List and state what is represented by the three code snippets provided below in less than one sentence each? Snippet #1 Snippet #2 Snippet #3 push %ebpmov %esp, %ebp sub X, %esp mov %ebp, %esp pop %ebpret leave ret
Consider CBC-mode encryption with a block cipher having a 256-bit key and 128-bit block length to encrypt a 1024-bit message. What is the length of the resulting ciphertext? Does your answer change if the key size is 128 bits?
Suppose a key space of 230. Alice decides to encrypt a plaintext block 6 times with 6 different keys. What is the effective key space for Trudy?
a. Describe the steps involved in mounting a statistical attack on a monoalphabetic substitution cipher. b. Explain why this approach would fail on a polyalphabetic substitution cipher?
Is it feasible to produce secret keys for use in cryptographic protocols on a desktop computer using software in such a safe way that they can be utilised, and is it viable to do so on a desktop computer?
In a substitution cipher, we “encrypt” (i.e., conceal in a reversible way) a message by replacing every letter with another letter. To do so, we use a key: in this case, a mapping of each of the letters of the alphabet to the letter it should correspond to when we encrypt it. To “decrypt” the message, the receiver of the message would need to know the key, so that they can reverse the process: translating the encrypt text (generally called ciphertext) back into the original message (generally called plaintext). A key, for example, might be the string NQXPOMAFTRHLZGECYJIUWSKDVB. This 26-character key means that A (the first letter of the alphabet) should be converted into N (the first character of the key), B (the second letter of the alphabet) should be converted into Q (the second character of the key), and so forth. A message like HELLO, then, would be encrypted as FOLLE, replacing each of the letters according to the mapping determined by the key. Let’s write a program called hw6.py…
Assume that you have a suitable source of randomness which can produce at least 264264 random bits before it repeats. What is the easiest way to turn this into a stream cipher suitable for encrypting long streams of plaintext?
Using public key cryptography, X adds a digital signature s to message M, encrypts <M, s>, and sends it to Y, where it is decrypted. Which one of the following sequences of keys is used for the operations? A) Encryption: X's private key followed by Y's private key; Decryption: X's public key followed by Y's public key B) Encryption: X's private key followed by Y's public key; Decryption: X's public key followed by Y's private key C) Encryption: X's public key followed by Y's private key; Decryption: Y's public key followed by X's private key D) Encryption: X's private key followed by Y's public key; Decryption: Y's private key followed by X's public key
2.(a) Consider the use of OTP. Let m be an arbitrary message to be encrypted and c be a given ciphertext in the ciphertext space. How many possible keys with which m can be mapped to c, i.e., f(m,k)=c? None 1 2 The size of the key space Depends on m (b) 3^(-n) is negligible. True or false? (c) n^(-100) is negligible. True or false?
In a RSA cryptosystem, a participant uses two prime numbers p and qis 17 and 11 respectively to generate his/her public key and privat keys. If the public key of participant is 7 and cipher text(C) is 11, then the original message(M) is. Correct answer will be appreciated , else downvoted.
Consider the following scenario: a lengthy string of text is encrypted using a Vigen'ere cypher, and the same string is discovered in the ciphertext beginning at various locations. Demonstrate how this information may be utilised to assist calculate the length of the key by explaining how it is obtained.
The message M is converted to message digest using the hash function H(). The sender A sends the encrypted message digest to the receiver B and the receiver decrypts the message to authenticate the sender. The private key is called Pr and the public key is called Py respectively. The message received by the receiver is?