page336336 Chapter 11 Network Securityinformed of the departure and accounts remain in the system. For example, an examinationof the user accounts at the University of Georgia found 30% belonged to staff members nolonger employed by the university. If the staff member's departure was not friendly, there is arisk that he or she may attempt to access data and resources and use them for personal gain,or destroy them to get back at the organization. Many systems permit the network managerto assign expiration dates to user accounts to ensure that unused profiles are automaticallydeleted or deactivated, but these actions do not replace the need to notify network managersabout an employee's departure as part of the standard human resources procedures.MANAGEMENT11-9 Selecting PasswordsFOCUSThe keys to users' accounts are passwords-we all force attack? Well, we have 220 possibilities, and if a com-know this. The stronger the password, the more secure isyour account. But what does it mean to have a "strong" approximately 17 minutes to break this password. We canpassword? We all heard that we shouldn't pick keyboard agree that this is a very easy password to remember, but itpatterns or names of family members or pets. But thendifferent organizations have different rules for howcreate strong passwords. Some might not give you any withoutguidelines, whereas others are strict about how manyputer can guess 1,000 guesses per second it would take usis also very easy to break.So how can we increase our password strengtht making it almost impossible to remember it?More companies are moving to passphrases instead ofletters you should use, numbers, and special passwords. A passphrase is simply four or more wordsthat is not a common phrase such as a line from a song orThe National Institute of Standards and Technology movie. Let's look at the following password that uses fourcommon words: horses love eating apples (without thespaces between the words). This password has 4 (for "h")+ 14 (for "orseslov") + 18 (for "eeatingapple") + 1 (for"s") = 37 bits of entropy. It would take 4.35 years for athischaracters you should use.(NIST) advises that the password strength boils down to thenumber of bits of entropy that a password has. So how canwe calculate these bits of entropy? NIST has proposed thefollowing rules to calculate the number of bits of entropyfor a password:1. The first byte counts as 4 bits.+ 1ocomputer guessing 1,000 guesses per second to breakpassword. You can increase the strength of this passwordby adding spaces between the words or a few numbers atthe end. This will then become a very easy password to2. The next 7 bytes count as 2 bits each.3. The next 12 bytes count as 1.5 bits each.4. Anything beyond that counts as 1 bit each.5. Mixed case + nonalphanumeric = 2 to 6more bits, depending on complexity.remember but a very difficult one to crack.General rules:For example, let's evaluate the following password'sentropy: Pa$$wOrd (one you shouldn't use). Recall thateach letter is represented as 1 byte.- The first byte counts as 4 bits; therefore, "p" givesus 4 bits of entropy.1 The next 7 bytes count as 2 bits each; therefore,"a$$wOrd" gives us 7 x 2 bits = 14 additionalbits of entropy.1 Mixed case + nonalphanumeric can give us upto 6 extra bits. Let's stay conservative and count 2bits for these characters in our password, becausethe symbols are a close match for letters.- Use passphrases, not passwords. Choose three orfour easily remembered words.1 Longer is better. We recommend passphrases thatare at least 15 characters long.1 Don't use the same passphrase everywhere.Instead, create a general passphrase you use butcustomize it for each site that requires a passwordby adding some numbers to it. For example,count the number of times the letter "a"in the URL of the website you are logging in toand add that to the end of your usual passphraseto create a unique passphrase just for that site.1 Always choose a unique passphrase for everyhigh-risk site, such as your bank.appearsThe total number of bits of entropy for our password is 20.How long will it take to crack this password using a brute 9. Refer to "Selecting passwords" onpage 337 to determine the entropy ofthe following password "R@pt0r" andestimate how long it will take acomputer that can guess 100 guessesin a second to crack this password.

Question

page336336 Chapter 11 Network Securityinformed of the departure and accounts remain in the system. For example, an examinationof the user accounts at the University of Georgia found 30% belonged to staff members nolonger employed by the university. If the staff member's departure was not friendly, there is arisk that he or she may attempt to access data and resources and use them for personal gain,or destroy them to get back at the organization. Many systems permit the network managerto assign expiration dates to user accounts to ensure that unused profiles are automaticallydeleted or deactivated, but these actions do not replace the need to notify network managersabout an employee's departure as part of the standard human resources procedures.MANAGEMENT11-9 Selecting PasswordsFOCUSThe keys to users' accounts are passwords-we all force attack? Well, we have 220 possibilities, and if a com-know this. The stronger the password, the more secure isyour account. But what does it mean to have a &#34;strong&#34; approximately 17 minutes to break this password. We canpassword? We all heard that we shouldn't pick keyboard agree that this is a very easy password to remember, but itpatterns or names of family members or pets. But thendifferent organizations have different rules for howcreate strong passwords. Some might not give you any withoutguidelines, whereas others are strict about how manyputer can guess 1,000 guesses per second it would take usis also very easy to break.So how can we increase our password strengtht making it almost impossible to remember it?More companies are moving to passphrases instead ofletters you should use, numbers, and special passwords. A passphrase is simply four or more wordsthat is not a common phrase such as a line from a song orThe National Institute of Standards and Technology movie. Let's look at the following password that uses fourcommon words: horses love eating apples (without thespaces between the words). This password has 4 (for &#34;h&#34;)+ 14 (for &#34;orseslov&#34;) + 18 (for &#34;eeatingapple&#34;) + 1 (for&#34;s&#34;) = 37 bits of entropy. It would take 4.35 years for athischaracters you should use.(NIST) advises that the password strength boils down to thenumber of bits of entropy that a password has. So how canwe calculate these bits of entropy? NIST has proposed thefollowing rules to calculate the number of bits of entropyfor a password:1. The first byte counts as 4 bits.+ 1ocomputer guessing 1,000 guesses per second to breakpassword. You can increase the strength of this passwordby adding spaces between the words or a few numbers atthe end. This will then become a very easy password to2. The next 7 bytes count as 2 bits each.3. The next 12 bytes count as 1.5 bits each.4. Anything beyond that counts as 1 bit each.5. Mixed case + nonalphanumeric = 2 to 6more bits, depending on complexity.remember but a very difficult one to crack.General rules:For example, let's evaluate the following password'sentropy: Pa$$wOrd (one you shouldn't use). Recall thateach letter is represented as 1 byte.- The first byte counts as 4 bits; therefore, &#34;p&#34; givesus 4 bits of entropy.1 The next 7 bytes count as 2 bits each; therefore,&#34;a$$wOrd&#34; gives us 7 x 2 bits = 14 additionalbits of entropy.1 Mixed case + nonalphanumeric can give us upto 6 extra bits. Let's stay conservative and count 2bits for these characters in our password, becausethe symbols are a close match for letters.- Use passphrases, not passwords. Choose three orfour easily remembered words.1 Longer is better. We recommend passphrases thatare at least 15 characters long.1 Don't use the same passphrase everywhere.Instead, create a general passphrase you use butcustomize it for each site that requires a passwordby adding some numbers to it. For example,count the number of times the letter &#34;a&#34;in the URL of the website you are logging in toand add that to the end of your usual passphraseto create a unique passphrase just for that site.1 Always choose a unique passphrase for everyhigh-risk site, such as your bank.appearsThe total number of bits of entropy for our password is 20.How long will it take to crack this password using a brute 9. Refer to &#34;Selecting passwords&#34; onpage 337 to determine the entropy ofthe following password &#34;R@pt0r&#34; andestimate how long it will take acomputer that can guess 100 guessesin a second to crack this password.

Accepted Answer

The given password:  R@pt0r
As per text:
for first character: 4 bits of entropy
for next characters:…