Why people participate in bug bounties

Assignment Help Computer Network Security

Reference no: EM13804552

Task-1

Q1. An affine cipher scheme (or algorithm) is the form - C(x) → (αx+β) MOD 26, where x is the numerical equivalent of the given plaintext letter, and α and β are (appropriately chosen) integers. The numerical equivalents of the letters are as follows:

a) Let α=5 and β=7, encrypt the message "Deakin School of IT"

Task-2

Q2. What are the core components of a PKI? Briefly describe each component.

Task-3

Q3. Explain the problems with key management and how it affects symmetric cryptography.

Task-4

Q4.

Consider the following threats of Web security and describe how each is encountered by a particular feature of SSL.

a. Brute Force Cryptanalytic Attack an exhaustive search of the key space for a conventional encryption algorithms.

b. Man-in-Middle attack: An attacker interposes during key exchange, acting as client to the server and as the server to the client.

c. SYN Flooding: An attacker sends TCP SYN message to request connection but does not respond to the final message to establish the connection fully. The attack TCP module typically leaves the "half-open connection" around for a few minutes. Repeated SYN messages can clog the TCP module.

Task-5

Q5.

What is port forwarding? What are the different types of port forwarding supported by SSH?

Task-6

Q6.

In IEEE 802.11, open system authentication simply consist of two communications. An authentication is requested by the client, which contains station ID (typically MAC address). This followed by an authentication response from the AP/router containing a success or failure message. An example of when a failure may occur is if the client's MAC address is explicitly excluded in AP/router configuration.

a) What are the benefits of this authentication scheme?

Task-7

Q7.

Assume you have found a USB memory stick in your work parking area. What threats might this pose to your work computer should you just plug the memory stick in and examine its contents? In particular, consider whether each of the malware propagation mechanism we study in chapter 10 of our text book could use such memory stick for transport. What steps could you take to mitigate these threats and safely determine the contents of the memory stick?

Task-8

Q8.

Assume you receive an e-mail that appears to come from your bank, with your bank logo in it and with the following contents:

"Dear customer, our records show that your Internet Banking access has been blocked due to too many logging attempts with invalid information such as incorrect access number, password, or security number. We urge you to restore your account access immediately and avoid permanent closure of your account, by clicking on this link to restore your account. Thank you from your customer service team."

What form of attack is this e-mail attempting? What is the most likely mechanism used to distributed e-mail? How should respond to such e-mails?

Task-9

Q9. Write a comprehensive report (800 - 1000 words) on the following topic:

a) Bug Bunty and its programme.

[In your report at least you should highlight the following points:

- What is bug bounty?

- What is the benefit for an IT company to join in bug bounty program?

- Why people participate in bug bounties?

- Will you plan to participate? If your answer is yes or no then explain.

- List (minimum ten) common targets of bug bounties.

- Name some sector/company so far not interested in bug bounty. Why they are not interested in joining Bug Bounty programme?

Reference no: EM13804552

Questions Cloud

Essay on the westing game : What is a good grabber about what partner you should pick or a question for a essay on the Westing Game?

Summary on the following reading about state and local brown : Summary on the following reading about state and local browndields: There are more than half a million brownfield sites in the United States. This series will demonstrate the various financial, regulatory, and planning aspects of successful projects ..

Samples of aircrew on long haul schedules are tests issues : What does this information tell you about a particular individual's stage IV sleep?

Explain and analyze what the organization is doing culture : The goal is to explain and analyze what the organization is doing to impact the culture. You can focus on the strengths and accomplishments of the group, or you could focus on its weaknesses and suggest ways the group could be more effective. Cite..

Why people participate in bug bounties : What are the core components of a PKI - Explain the problems with key management.

The ethics of making the numbers : Will sales and profits meet the expectations of investors and Wall Street analysts? Managers at public corporations must answer this vitally important question quarter after quarter, year after year.

Ethics in healthcare : Ethics in Healthcare

Writing mechanics and technical style conventions : Write clearly and concisely about topics related to information systems for decision making using proper writing mechanics and technical style conventions.

Provide a rationale for each extra contractual motivator to : Analyze two (2) possible extra-contractual motivators that Boeing might consider when bidding on future military contracts. Provide a rationale for each extra contractual motivator to support your response.

User Account

All Pages