Reference no: EM133632157
Assignment
Problem I: Problem analysis
Next Generation 911 (commonly referred to as NG911) is a digital, internet protocol (IP)- based system that will replace the analog 911 infrastructure that's been in place for decades. Check the following three YouTube videos for more information related to NG911.
1. "What is the next generation 9-1-1"
2. "Benefits of NG911 for Law Enforcement"
3. "Got 11 Min? Here's Why NG911 is more Cost Efficient than E911"
Consider you are a user or service provider (local emergency medical, first, or law enforcement agencies). Use your own words and give at least TWO examples given the confidentiality, integrity, and availability requirements associated with the system. Which one is a more important security requirement compared to the others?
1. Confidentiality
2. Integrity
3. Availability
4. Which one is more important, or which one is less important? Explain why.
5. If possible, list three research/open questions related to NG911 by doing some research.
Problem II: Classify each of the following as a violation of Confidentiality (C), Integrity (I), Availability (A), Assurance (AS), Authenticity (AU), or some combination of these.
1. Bob eavesdrops on Alice's text messages.
2. Bob crashes Alice's system.
3. Bob changes the amount of Alice's check from $100 to $1,000.
4. Bob forges Alice's signature on a deed.
5. Bob registers the domain name "Costco.com" and refuses to let the company buy or use that domain name.
6. Bob intercepts Alice's email message, changes the text, and forwards it to the intended recipient.
7. Bob is the software developer of the myleo system. Bob left a backdoor in the system so that he could access the system without 2-Step authentication.
8. Bob obtains Alice's credit card number and has the credit card company cancel the card and replace it with another card bearing a different account number.
9. Bob spoofs Alice's IP address to gain access to her computer.
10. Bob sends spam using his @tamuc.edu email address.
Problem III: Access Control
Assumption:
A. Privileges: read ("R"), write ("W"), execute ("X")
B. Resources:
1. Image files: tamuc.jpg, jessM.png, csci351.gif
2. Document files: syllabus.doc, lecture.ppt, assign01.odt - Binary files: a.exe, b.exe, c.exe, m.dmg
3. Video files: lecture01.mp4, lecture02.mp4
4. Web files: week1.html, week2.html, week3.php
C. Access permissions:
1. A has the privilege to read all the document files.
2. B has the privilege to read and write all the images files. - B and C have the privilege to read "syllabus.doc"
3. A and C have the privilege to read and execute "a.exe", "b.exe".
4. C and D have the privilege to read jessM.png.
5. D has the privilege to read and write all video files. - All users have the privilege to read all web files.
6. E has the privilege to read and write all web files.
Task
1. Construct the corresponding access control matrix. To answer, use the format in Table 1.1 in the textbook.
2. Construct the corresponding access control list. To answer, use the format in Figure 1.5 in the textbook.
3. Construct the corresponding capabilities list. To answer, use the format in Figure 1.6 in the textbook.