N/A - unable to process (input too vague)

¶ … Pfleeger, a hash function is used for the provision of message integrity checks and digital signatures. It is a transformation that takes an input and returns a fixed-size string. The basic requirements for a cryptographic hash function are that its input can be of any length but its output has a fixed length. It is said to be a one-way function if it is simply hard to invert. If, given a message, it is computationally infeasible to find a message then it is said to be a weakly collision-free hash function. A strongly collision-free hash function is one for which it is computationally infeasible to find any two messages.

2.The use of SSL ensures that SSL servers and clients can be configured to use only specific cryptographic algorithms.

3.Pfleeger's method for costing requires calculation of expenses and costs associated with delivering a cost effective security system based on risk analysis of potential risks from hackers posed to any particular system.

Computer information security is increasingly being seen as more than simply keeping intruders out and protecting the integrity of data.

5.Your textbook talks about different types of attacks on networks. List three commonly used attacks (not a guess, but as reported in the literature), and describe the operation of each type.

Remember this is a two-part question, first identify the attacks, and then describe how each works.

A denial-of-service attack is a type of attack that is designed to bring the network to its knees by flooding it with useless information. In this type of attack, for example, a smurf attacker sends PING requests to an Internet address, where it is swamped with replies to echo requests. Denial of service attacks do not directly impinge upon the hardware of a system, unlike viruses, which impinge upon a system's programs and run against the user's wishes. It will quickly use all available memory to bring the system to a halt. A worm is a type of virus that can replicate itself, but does not become attached to other programs

6.Spoofing is considered a serious threat to computer networks. What could you do to control or protect your systems and organizations from such activity?

Web spoofing allows an attacker to create a shadow copy of the entire World Wide Web. It is a kind of a security attack that allows the attacker to observe and modify all web pages sent to the victim's machine, and to observe all information on the pages. It usually involves the creation of TCP/IP packets using somebody else's IP address. Routers and firewalls can defend against spoofing, as can the creation of difficult to replicate domains.

7.We studied many different types of firewalls. Can you name three types of firewalls, and describe how each type functions.