1)
a) For the first proposed disk encryption scheme: CBC Mode version
Definition: In the CBC mode, we have an initialization vector which you XOR the first block of plaintext against. You then encrypt that block of plaintext. The next block of plaintext is xor'd against the last encrypted block before you encrypt this block. The CBC mode has the ability to hide statistical properties of the plaintext blocks. The result of the encryption of a block depends on all previous encrypted blocks
Confidentiality: CBC provides the data confidentiality property only if the IV (initialization vector) is chosen to be a truly random number.
Random Access: With CBC mode, we don’t need to decrypt the whole ciphertext in order to read part of the message. We only need two ciphertext blocks to decrypt a desired message block because CBC decryption is not sequential, but parallel. CBC does not provide random write access to encrypted data which means that any change to any message blocks would require re-encryption of all blocks after that message block with fresh random IV. Also, it cannot be parallelized.
Storage Efficiency: CBC has a storage efficiency property which means that the encryption operation does not result in significantly more data being stored. We know that CBC is just a single XOR operation per block encryption/decryption.
b) For the second proposed disk encryption scheme: CTR Mode version
Confidentiality: CTR provides the data confidentiality property only if the IV (initialization vector) is chosen to be a truly random number.
Random Access: The advantage is that it allows easy random read and write access to any position of the streamed content.
• Because there is dependency on previously generated blocks in the encryption p...
... middle of paper ...
...y code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights. Also, failed attempts will cause a denial-of-service condition. Both workstations and servers are at risk, but servers could be at more risk if administrators allow users to log on to servers and to run programs.
Successful exploitation of any of these vulnerabilities could result in an attacker gaining the ability to install programs; view, change, or delete data; or create new accounts with full administrative rights.
What are the nature and cause(s) of the vulnerability?
For example, is it: the result of a programming error in an unsafe language? an incomplete or inconsistent specification? a flawed design in terms of modularity and/or encapsulation? More than one of these? Something else? Explain your answer.
This is to address speed difference between two devices, if a file is received from a slow device to be transferred to a faster device (Hard disk), a buffer is created to to gather bytes received from the slower device, when the buffer is full it can then be transferred to the disk in a single operation. However, if the buffer is full and the slow device still needs to transfer additional data, a second buffer is created to accommodate the data. After the first buffer has been filled a disk write is requested, the slow device fills the second buffer while the first buffer is written into the disk. When the second buffer
This question marks its way back to the time when people used to rely on the security of windows login credentials. The security no doubt prevented users from having access to one’s personal computer, but once a person had logged into the system, he/she would have the access to basically anything and everything that came their way.
The Operating System (OS) is the heart of computer server and client systems; therefore they are the pivotal components of the Information Technology (IT) architecture. The OS contains the crucial data, information, and applications, which are vulnerable, and can be infiltrated to cripple the entire IT architecture of the organization. Therefore, it becomes mandatory to properly safeguard the OS from an internal or external intrusion (Stallings & Brown, 2012). This critical thinking report will highlight the security concerns that may impact the OS. Further, the security guidelines and best practices for the OS in general, along with the specific fundamentals regarding the Windows and Linux OS are comprehensively illustrated.
On August 12, 2003, a computer worm was released called MSBlaster.B, which was distributed through two files “teekids.exe” ( which included code that directs compromised computers to attack the Microsoft domain name www.windowsupdate.com and a backdoor file “Lithium” ( which allows a way into a password protected system without use of a password and remote control a system). The worm itself targeted mostly Windows 2000 & Windows XP systems. If Windows NT or Windows 2003 servers do not have the appropriate patches, they too may be vulnerable. The function of the worm is to exploit the DCOM RPC vulnerability.
What is encryption? Encryption is a technological technique that protects and secures the transfer of plain text information between two sources through the use of the internet. This is done by rearranging the text using a mathematical algorithm that renovates the message into an indecipherable form, which can only be unlocked and translated with a use of a key. The strength of the encryption key is measured by its length, which is determined by the number of bits and by the type of encryption program.
After compression, the structure data, audio and video must be multiplexed. A number of compressed TV signals are combined by a multiplexer and put unto a shared transition medium. This is done by one of the two possible kinds of multiplexers that result in either a transport or a program stream, which is suited for secure transmission paths since it can contain large amounts of information. In addition multiplexing can be done using various methods. Time division multiplexing allocates a distinct time interval for each channel in a set; with the help of synchronization and a fixed interval order the channels take turns using the common line.
Just like any other security tool or software available, there are many different forms of vulnerability s...
The war in Vietnam ranged from 1956 to 1975, within these years many unconventional methods of warfare were used, such as “Agent Orange”, guerilla warfare and even events such as the “My Lai Massacre” occurred. The Vietnam War was a proxy war in which the United States fought the North Vietnamese who were backed by the USSR, we did not win the Vietnam war due to a lack of clear goals, and the impossibility to combat the North Vietnamese soldiers who by day were regular civilians but by night were using guerilla attacks on U.S. soldiers. Throughout the Vietnam War our troops and bombs caused large amounts of damage to the land of North and South Vietnam but the most damage was in our own home. Throughout the United States involvement in Vietnam, there were many adverse effects on our own lives, including the large increase of political, social and economic tension. The Vietnam War heightened social, political and economic tensions by causing inflation and a growing budget deficit of the United States. For the social tensions, it caused for the first time people protesting against a war and a lack of faith in the government due to being lied to. And as for political tensions the first lottery draft in history stressed many politicians due to an outraged population.
This type of encryption key administration is to create an extra key for decoding the data and is kept secure in escrow by an authorised 3rd party. We can also call this as a backup key or split-key. This kind of encryption method is been using to recover the data if a user forgot the password.
There was a failure to communicate across departments and branches, to write software that assumed software is fallible, and a failure to document reasons for doing any of these things (Lions,
It allows access to the low-level OS functionality and the OS protection. Also, some users may like to install the modified operating systems on their devices, which only possible with privileged access and it can introduce the high risk of malware infection.[2][6]
One of them could be the system could crash as if not saved data can
Encryption converts a message in such as way that its contents are hidden from unauthorized readers. It is intended to keep messages and information as a secret. Plaintext, also known as clear text, is the plain or original message, which is has not yet been encrypted. Once the message is encrypted it is then called a cipher text. This process is obviously referred as encryption. The exact opposite process is called decryption. Encryption is the most successful way to attain data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it. Data encryption is a means of scrambling the data so that is can only be read by the person holding the key, a password of some sort. Without the key, the cipher cannot be broken and the data remains secure. Using the key, the cipher is decrypted and the data is returned to its original value or state. Each time one desires to encrypt data, a key from the 72,000,000,000,000,000 possible key variations, is randomly produced, and used to encrypt the data. The same key must be made known to the receiver if they ar...
The length of the key for the encryption can vary from being very short to extremely long, and the length of the message being encrypted. The protection of data being transferred between ATMs and the bank, and the use of cell phones, is the most common everyday encounter with encryption. To encrypt and decrypt information, a cipher is used. In a cipher, there is a set of well-defined steps that can be followed to encrypt and decrypt messages.
attacker can then control that machine. How do you defend against this? It is just as simple as defending