Why is the file kept inaccessible to the web server

Assignment Help Computer Network Security

Reference no: EM131585503

Assignment

Question 1: Consider the scheme used to allow customers to submit their credit card and order information. Section 23.3.3.2 states that the enciphered version of the data is stored in a spooling area that the Web server cannot access.

a. Why is the file kept inaccessible to the Web server?

b. Because the file is inaccessible to the Web server, and no other services are available to an attacker from the Internet, the encipherment may seem unnecessary. Discuss this issue, but assume that the attacker is on the internal network.

Question 2: Assume that an attacker has found a technique for sending packets through the outer firewall to the DMZ without the packets being checked. (The attacker does not know the internal addresses of hosts in the DMZ.) Using this technique, how can the attacker arrange for a packet to be sent to the WWW server in the DMZ without the firewall checking the packet?

Question 3: As encryption conceals the contents of network messages, the ability of intrusion detection systems to read those packets decreases. Some have speculated that all intrusion detection will become host-based once all network packets have been encrypted. Do you agree? Justify your answer. In particular, if you agree, explain why no information of value can be gleaned from the network; if you disagree, describe the information of interest.

Reference no: EM131585503

Questions Cloud

Marginal rate of tax on remitted profits from the subsidiary : If the foreign parent has surplus foreign tax credits, what is the marginal rate of tax on remitted profits from the subsidiary?

How many lines can our geometric structure have : As in Problem, we are going to create a geometric structure from a finite number of points in the plane. Suppose that we have seven points.

How did people react to the change : How did people react to the change? How did you react?

Investment has negative NPV : how large does the probability of expropriation in year 5 have to be before the investment has a negative NPV?

Why is the file kept inaccessible to the web server : Why is the file kept inaccessible to the Web server? Discuss this issue, but assume that the attacker is on the internal network.

Choosing a decision alternative : As a new manager, what would you do to prevent yourself from choosing a decision alternative just to correct or validate a previous decision?

Capital investment decisions or capital budgeting decisions : Explain and discuss different methods for capital investment decisions or capital budgeting decisions criteria.

List the organizations business objectives : BSBINN601 Lead and Manage Organisational Change Assignment. Write a list of possible needs for change. List the organization's business objectives

Optimum portfolio of fully-partially selected investments : Determine the optimum portfolio of fully and partially selected investments. will it change the funding selection and or the percentages?

User Account

All Pages