INSTRUCTIONS!!

 Share some of your ideas and reflections from your reflective journal with your colleagues. You may wish to reflect on the goals you set for yourself at the beginning of the term. Did you meet them? It is not necessary to share the entire journal. Do not share any reflections that you wish to remain private. 

IN THE FILE BELOW YOU WILL FIND!!

WEEK 2 and WEEK 7  Discussion questions, you can come up with some goals that were set to help me reach the things that were described in these entries

Below was a statement that i made in my journal that I had to compose for the most valuable learning experience i learned from week 2 &7 assignment this can be utilized

week 2 Information that my peers noted in their discussion questions regarding how monitoring and managing projects are important.

week 7 This can hinder anyone not just individuals in higer ranked roles, I state this because individuals sometimes assume only people in higher power have to deal with this.

1. Calculate the timing of password-guessing attacks:

(a) If passwords are three uppercase alphabetic characters long, how much time would it take to determine a particular password, assuming that testing an individual password requires 5 seconds? How much time if testing requires 0.001 seconds?

(b) Argue for a particular amount of time as the starting point for “secure.” That is, suppose an attacker plans to use a brute-force attack to determine a password. For what value of x (the total amount of time to try as many passwords as necessary) would the attacker find this attack prohibitively long?

(c) If the cutoff between “insecure” and “secure” were x amount of time, how long would a secure password have to be? State and justify your assumptions regarding the character set from which the password is selected and the amount of time required to test a single password.

  2. Describe each of the following four kinds of access control mechanisms in terms of (a) ease of determining authorized access during execution, (b) ease of adding access for a new subject, (c) ease of deleting access by a subject, and (d) ease of creating a new object to which all subjects by default have access.

• per-subject access control list (that is, one list for each subject tells all the objects to which that subject has access)

• per-object access control list (that is, one list for each object tells all the subjects who have access to that object)

• access control matrix

• capability

3. Design a protocol by which two mutually suspicious parties can authenticate each other. Your protocol should be usable the first time these parties try to authenticate each other.

4. List three reasons people might be reluctant to use biometrics for authentication. Can you think of ways to counter those objections?

  5. If you forget your password for a website and you click [Forgot my password], sometimes the company sends you a new password by email but sometimes it sends you your old password by email. Compare these two cases in terms of vulnerability of the website owner.

  6. Defeating authentication follows the method–opportunity–motive paradigm described in Chapter 1. Discuss how these three factors apply to an attack on authentication.

  7. Suggest a source of some very long unpredictable numbers. Your source must be something that both the sender and receiver can readily access but that is not obvious to outsiders and not transmitted directly from sender to receiver.

  8. Humans are said to be the weakest link in any security system. Give an example for each of the following:

(a) a situation in which human failure could lead to a compromise of encrypted data

(b) a situation in which human failure could lead to a compromise of identification and authentication

(c) a situation in which human failure could lead to a compromise of access control.

 9. Explain why hash collisions occur. That is, why must there always be two different plaintexts that have the same hash value? 

10. What property of a hash function means that collisions are not a security problem? That is, why can an attacker not capitalize on collisions and change the underlying plaintext to another form whose value collides with the hash value of the original plaintext?

Chapter 5: Strategies in Action
Chapter 6: Strategy Analysis and Choice

Q1.  Reflect on what you have read in the textbook from chapter 5 and 6 and then type a one and half page paper concerning the topics that you believed where worth your reading and understanding.  What was the most valuable thing that you learned and why? 

Q2. Go to the end of Chapter 5 and do Exercise 5B “Should Coca-Cola, Build, Borrow, or Buy in2020 -2021?” Steps 1, 2, and 3  (one and half page assignment).  (When accessing Coca-Cola’s website, you’ll have to click on “Press Center,”.)  

Q3. Then go to the end of Chapter 6 and do Exercise 6A “Perform a SWOT Analysis for Coca-Cola” as an individual, one page assignment. 

Textbook attached.

Instructions

You will write a flowchart, and C code for a program that does the following:

1. Within main(), it asks for the user’s annual income.
2. Within main(), it calls a function called printIt() and passes the income value to printIt().  
3. The printIt() function evaluates the income, and if the number is  over 90000, prints a congratulatory message.  If the income is not over  90000, it prints a message of encouragement, like “You WILL make  $50,000, if you keep going.”

Here is what the output looks like.

Submission Instructions

Upload your Flowgorithm file, your .c file, and a screenshot of your code output saved in a Word document 

Question 1 see attachment

Question 2: List the different WiFi frequency bands and their associated names/standards. Explain how to increase WiFi coverage using different technologies and what security solutions exist to ensure confidentiality.

Question 3: Your operator has delivered you a binary software image, viewed with a hex editor, coming from a CPU you are not familiar with. She states that it was from a RISC 32-bit architecture that is commonly used in many devices. What steps would you take to identify the image? Be as specific as possible. What follow on questions would you ask to facilitate your analysis?

Question 4: see attachment

Question 5: Given the following bash script, explain what the script is doing (Hint: This is on a linux machine)

(for addr in {1..254};

do for port in {20..23} 80; 

do 

nc -nvzw 1 10.25.0.$addr $port 2>&1; 

done& 

done) | grep ‘open’

Question 6: Given the network 192.168.2.0/23, an IT department needs three variable-length subnets. For the first subnets, the IT department needs 100, 75, 32 hosts, respectively. Based on the information given, compute the variable-length subnets needed to satisfy the IT department’s needs. 

Hosts Needed  | Hosts Given | Network ID | SN Mask | 1st Available IP | Last  Available IP | Broadcast IP

Question 7: Describe a corporate network infrastructure design with which you’re familiar and define the critical areas that need to be secured. What vulnerabilities exist and what are methods for mitigation? Prioritize what needs to be secured and what the potential impacts would be if not secured properly.