Explain a situation when a user's complete service denial (i.e., no computer response) is a serious concern. Explain another case where a 10% denial of service (i.e., the user's calculation proceeds at a 10% slower rate than usual) is a major concern for that user. Could illegal computer access cause a 10% service denial for genuine users? If yes, how?

Explain a situation when a user's complete service denial (i.e., no computer response) is a serious concern. Explain another case where a 10% denial of service (i.e., the user's calculation proceeds at a 10% slower rate than usual) is a major concern for that user. Could illegal computer access cause a 10% service denial for genuine users? If yes, how?

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter2: Compliance: Law And Ethics

Section: Chapter Questions

Problem 1EDM

See similar textbooks

Similar questions

Suppose that the IDS system examines each file that is downloaded. This IDS has a false alarm probability of 0.001. Suppose that on average, an employee downloads a file once an hour. If each alarm takes the IT team 2 hours to fully investigate, how bug does the IT team need to be for a 2000 employee company?
Consider the following scenario: The ABC Bank has many ATM branches all over the country. The customers of the bank use these machines mainly for withdrawing money. Further they can transfer money from one account to another using these machines. Also they can deposit any amount of money into their accounts. The customers can contact a banking assistant through the system if any error occurred during a transaction. The ATM can be filled only by cashier. The system should authenticate the users before they are allowed to use it for the transactions mentioned above. Draw use case diagram for the above scenario Can I have a step-by-step explanation on drawing the use case diagram with the completed use case diagram? Thank you!
Computer Science must answer ALL parts for upvote, as per chegg guidelines, up to four subparts may be answered. Correct, completed parts are guaranteed an upvote. Thank you. - Explain the concept of two factor authentication and give an example of applications. - One claims that ((x^3 + x + 1)^-1) in GF(2^4) mod (x^4 + x + 1) is (x^2 + x + 1). Prove whether the claim is correct or wrong.
(2). Suppose that as part of Bob’s early (unsuccessful) experiment with cloud based surveys, the authentication system allows the user to attempt 100 passwords per second, but the user must wait for a 5 second lockout period, every 10 seconds. The password Bob used is 5 digits in length, only digits 0 – 9 inclusive allowed. a) Showing all steps, Calculate and show the total amount of time required for the attacker to guarantee to guess the password, including delays and actual guessing time. b) Bob eventually adjusted his authentication system to make it more difficult using hashing and other techniques, but then he realized that Malice has been capturing the hashed passwords sent from his laptop to the cloud server for authentication, to try to replay the hashes. List the basic attack vectors Bob’s latest authentication system is vulnerable to, based on the…
For the Laplas Clipper malware, please write a short paragraph based on the given background and website info: - the date of the first incident’s report - How does it work, - How one should protect his/her system against this malware - If infected, how one can cope with that? Is there any solution? Laplas Clipper is a variant of information stealing malware which operates by diverting crypto-currency transactions from victims’ crypto wallets into the wallets of threat actors [1]. Laplas Clipper is a Malware-as-a-Service (MaaS) offering available for purchase and use by a variety of threat actors. It has been observed in the wild since October 2022, when 180 samples were identified and linked with another malware strain, namely SmokeLoader [2]. This loader has itself been observed since at least 2011 and acts as a delivery mechanism for popular malware strains [3]. SmokeLoader is typically distributed via malicious attachments sent in spam emails or targeted phishing campaigns but…
Is encryption of the connection and data from end to end possible? What is the advantage? Describe a scenario in which all encryption methods would be beneficial.
A recent incidence involving a security fault in authentication or access control might make for a fascinating case study, especially if the problem was discovered very recently. Does this result in a change in the way that the company conducts its business? May I inquire if this business has ever filed for bankruptcy, and if so, how much money was lost in the event that it did?
Assuming that digital evidence has been secretly secured from a user account on a cloud service: is it lawfully obtained? If the answer is negative, who is the aggrieved party? Is the consequence that the evidence must be excluded from being adduced at trial? Which rule (principle) is relevant in this respect, and who decides?
Analyze the following scenario: An employee using company resources sends email that is later retrieved when the employee sues the company. Is there a reasonable expectation of privacy? Is it different if the computer used was purchased by the employee but the email was sent during work hours? What additional facts or changes in your assumptions would alter your analysis? Ethically, what are the arguments, pro and con, for an employer monitoring electronic communication?
Provide an example of a made-up circumstance that calls for the administration of login credentials. Determine a variety of various procedures to apply in order to authenticate users. What factors have contributed to the increase in the importance we place on being able to recall our usernames and passwords in the modern era?
If an RSA system, the public key of a given user is e = 31, n = 3599. What is the privet key of this user? If x = 3 mod 7, and x = 5 mod 13, and x = 8 mod 11, what value is x? Show all the steps. If code was used to solve this question then attach the code snippet with the answer. If any online-service or reference were used then clearly state so and provide the reference.
Assume passwords are selected from four-character combinations of 26 alphabetic characters. Assume an adversary is able to attempt passwords at a rate of one per second. a. Assuming no feedback to the adversary until each attempt has been completed, what is the expected time to discover the correct password b. Assuming feedback to the adversary flagging an error as each incorrect character is entered, what is the expected time to discover the correct password?