1.You have two puzzles with parameters as follows:
Puzzle A: One sub–puzzles. k = 6.
Puzzle B: Eight sub-puzzles. k = 3.
You should provide, for both cases other than part (b), the following:
(a)The distribution of the number of cases that require each number of hashes.
(b)Explain the method you used to obtain your distributions. Don’t
show working, it’s more “I wrote a C++ program to … and then using … I …”.
(c)A graph of the distribution of the data above.
(d)The average number of hashes needed.
(e)The standard deviation for the distribution of the number of hashes needed.
You should assume that if there are N possible solutions you check the N th by hashing even if all others have failed and there has to be a solution.
2.Which general security principle is violated in the following pseudo-code? Modify the pseudo-code to fix the potential security problem.
permit = CheckAccess()
IF (permit == Access_Denied) Print “Access Denied”
ELSE
Print “Access Granted” Run Function()
3.Consider that the incidence of viral attachments in email messages in 1 in 800. Your malware checker will correctly identify a message as viral 95% of the time. Your malware checker will correctly identify a message as non viral 95% of the time. Your malware checker has just flagged a message as being malware. What is the probability that the message is okay? Justify your answer using Bayes theorem.
4.Describe a specific instance of an insider placing malware within a system. You should describe the type of malware placed, the expected likely impact, and some details regarding the outcome. This is not meaning a hypothetical scenario you have made up, find an actual real-world example.
5.Every hour the worm X spreads from each infected computer to one previously uninfected computer. In answering these questions you should explain how you determined your answers.
(a)Give a table showing the number of infected computers at each hour across a 24 hour period.
At time t = 0 the number of X infected computers is N = 1.
(b)By time t = 6.5 a counter worm W has been developed and it is deployed on one infected computer. W removes malware X from any host W is on. The counter worm W spreads slightly more quickly than X, with each W spreading to two X infected hosts each hour, provided such hosts are available.
Provide another table showing the spread of W and the impact on X across an appropriate time frame, starting from t = 0 again.
Note the offset in time means that at t = 6.5 the number of X infected computers reduces by 1, so the spread of t = 7 will be slightly smaller than before. Overall the number of X infected computers will go up on the hour, and down on the half hour.
(c)Graph the two cases against each other, clearly indicating on it where N = 0.
(d)Assume that at time t = 9, X evolves to spread to three uninfected computers each hour. What subsequently happens?
6.Briefly describe each of the following. Specify the domain and nature of each.
(a)An XML bomb.
(b)BlueSmack.
(c)Mydoom.
(d)Torpig.
