Classify each of the following vulnerabilities using the Protection Analysis Model. Assume that the classification is for the implementation level. Remember to justify your answers. (a) The presence of the “wiz” command in the sendmail program (b) The failure to handle the IFS shell variable by loadmodule (c) The failure to select an Administrator password that was difficult to guess (d) The failure of the Burroughs system to detect offline changes to files .

Classify each of the following vulnerabilities using the Protection Analysis Model. Assume that the classification is for the implementation level. Remember to justify your answers. (a) The presence of the “wiz” command in the sendmail program (b) The failure to handle the IFS shell variable by loadmodule (c) The failure to select an Administrator password that was difficult to guess (d) The failure of the Burroughs system to detect offline changes to files .

LINUX+ AND LPIC-1 GDE.TO LINUX CERTIF.

5th Edition

ISBN:9781337569798

Author:ECKERT

Publisher:ECKERT

Chapter14: Security, Troubleshooting, And Performance

Section: Chapter Questions

Problem 12RQ

See similar textbooks

Similar questions

Classify each of the following vulnerabilities using the PA model. Assume that the classification isfor the implementation level. Remember to justify your answers.(a) The presence of the “wiz” command in the sendmail program (b) The failure to handle the IFS shell variable by loadmodule (c) The failure to select an Administrator password that was difficult to guess (d) The failure of the Burroughs system to detect offline changes to files
Classify each of the following vulnerabilities using the PA model. Assume that the classification isfor the implementation level. Remember to justify your answers.(a) The presence of the “wiz” command in the sendmail program (see Section 24.2.9).(b) The failure to handle the IFS shell variable by loadmodule (see Section 24.2.9).(c) The failure to select an Administrator password that was difficult to guess (see Section 24.2.10).(d) The failure of the Burroughs system to detect offline changes to files (see Section 24.2.7) PA : Improper protection domain initialization and enforcement Improper choice of initial protection domain (domain) Improper isolation of implementation detail (exposed representations) Improper change (consistency of data over time) Improper naming (naming) Improper deallocation or deletion (residuals) Improper validation (validation of operands, queue management dependencies) Improper synchronization Improper indivisibility (interrupted atomic…
Classify each of the following vulnerabilities using the Protection Analysis Mode( PA) model. Assume that the classification isfor the implementation level. Remember to justify your answers.(a) The presence of the “wiz” command in the sendmail program (b) The failure to handle the IFS shell variable by loadmodule (c) The failure to select an Administrator password that was difficult to guess (d) The failure of the Burroughs system to detect offline changes to files Protection Analysis Mode( PA) model: Improper protection domain initialization and enforcementa. Improper choice of initial protection domainb. Improper isolation of implementation detailc. Improper change, consistency of data over timed. Improper naminge. Improper deallocation or deletion2. Improper validation, validation of operands, queue management3. Improper synchronizationa. Improper indivisibility, interrupted atomic operationsb. Improper sequencing, serialization4. Improper choice of operand or operation
QUESTION 14 Which security process records the occurrence of specific operating system events in the Security log? a. Encrypting b. Auditing c. Filtering d. Hashing
How a virus-infecting executable may add itself to an executable. Why must modifications be made to the executable?
a computer virus that embeds itself in an executable. What should be updated if the executable has to be modified?
For each exploit, provide the following information in the README.md: A small writeup indicating the steps you used to recreate The types / classes of vulnerabilities involved and any related CVE identifiers Identify affected versions and patches Links to the source code, where possible A screen cap Example Exploits: CSRF User Enumeration Privilege Escalation
Powershell 8.How can we get a list of the newest 10 event logs from the Security Logs and display only thevalues from Source and Message?9. How can we get a list of all processes, sort them by ProcessName in ascending order, and then theHandles by descending order?10. How can we get a list of aliases, group them by their definition, sort them by the count with thehigher count on top?
Assume a system can accommodate 2,000 users. Propose a UNIX security mechanism that allows 1,990 users access to the "MPX.pdf" file. How would you handle the remaining 10 individuals who are denied access to the file?
Salt enhances the difficulty of guessing in the UNIX login authentication procedure by a factor of ten. The salt, on the other hand, is saved in the same file as plaintext, in the same entry as the hashed password. As a result, if an attacker has knowledge of the salt and hashed password from the password file, the password does not need to be guessed. Why is it claimed that salt boosts security?
A virus that infects a computer by attaching itself to a file that may be run. What should be updated if the executable has to be modified?
Is a trusted platform module (TPM) necessary for full-disk encryption?