Consider the scenario where the hacker makes a phone call to the customer and trying to pretend that he or she is an employee of Gmail and convincing the customer to reveal the information such as a mail id, password and other information to gain an access to their email account. One of the customers gave such details to this hacker by trusting him as an employee of the Gmail. After a few weeks, some unwanted mail are sent from the customer’s email account. Immediately, the customer reported to the Gmail and the Gmail found that his account has been hacked by the hacker. a) From the above scenario, identify the name of the attack, type of the attack. Justify your answer. b) Explain the attack identified in question (a). c) How to prevent the attack identified in question (a)?

Consider the scenario where the hacker makes a phone call to the customer and trying to pretend that he or she is an employee of Gmail and convincing the customer to reveal the information such as a mail id, password and other information to gain an access to their email account. One of the customers gave such details to this hacker by trusting him as an employee of the Gmail. After a few weeks, some unwanted mail are sent from the customer’s email account. Immediately, the customer reported to the Gmail and the Gmail found that his account has been hacked by the hacker. a) From the above scenario, identify the name of the attack, type of the attack. Justify your answer. b) Explain the attack identified in question (a). c) How to prevent the attack identified in question (a)?

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter2: Compliance: Law And Ethics

Section: Chapter Questions

Problem 1EDM

See similar textbooks

Similar questions

Consider a piece of software that allows a surgeon in one place to participate in a surgery on a patient in another city via the use of an internet connection. Who would be interested in following the programme? Exactly what sort of damage do they want to cause? What kinds of vulnerabilities could they attempt to exploit in order to do you harm? Is it conceivable that such vulnerabilities may cause damage even if there isn't an active, hostile adversary trying to take advantage of them?
Describe the steps of the Existential Forgery Attack against the RSA Digital Signature, as discussed in class. Then, whether or not the attacker, Oscar, is able to produce a message with the correct signature signed by Bob, state yes or no. Why?
As discussed in class, describe the steps of the Existential Forgery Attack against the RSA Digital Signature. Then, if the attacker, Oscar, is able to create a message with the right signature signed by Bob, say yes or no. Why?
Take, for example, a piece of software that, over the internet, permits a surgeon in one area to perform surgery on a patient in another. And now that the program is over, who would want to keep going? What kind of destruction do they want to cause? To what extent would they look to your weaknesses in order to pull you down? Is it possible that damage may be caused by such vulnerabilities even if there were no hostile aggressor present?
Give an example of a situation involving login management. Keep track of as many different authentication methods as feasible. Do you think passwords will become outdated anytime soon?
Consider the following scenario: the developer of an online banking software system has added a secret feature that gives him account information for any account having a balance of $10,000 or more in it. This seems to be a kind of assault, and what are the risks involved?
Give an example of a fictitious situation requiring the management of logins. To authenticate users, identify a range of different methods. What's changed in terms of how much we rely on remembering our usernames and passwords these days?
Go for example the possibility of someone stealing a bank. In this scenario, the robbery may really take place. How does the bank go about preventing future intrusions, identifying current ones, and responding to those that have already taken place when it discovers one that has already taken place?
There are programs that allow medical professionals in various places to work together on the same patient through the internet while they are doing surgery on that patient. The people who are trying to hack the software may be anybody. What do you believe the level of harm that they want to do will be? Which of your weaknesses are they most likely to take advantage of in order to hurt you? Is it possible for these vulnerabilities to cause damage even in the absence of an active and malicious attacker?
Provide an example of a scenario involving registration administration. As many distinct authentication methods as feasible should be recorded. Do you think passwords will become antiquated in the near future?
Create a made-up scenario involving the administration of login credentials and explain it in detail. Find more about the different authentication techniques. Although a login and password are required, do you think they will always be necessary?
Consider a situation that necessitates the handling of login credentials and make intelligent predictions. Create a list of all the methods in which you have been able to confirm your identity to date. Do you anticipate the elimination of passwords in the near future?