WEB Security

Question 1. Most common security threats to web applications include. (5pt)

a) Insecure Cryptographic Storage

b) Cross-Site Scripting (XSS), 

c) Canonicalization 

d) Denial-of-Service Attack

e) All of the above

Question 2. True/False. (5pt) When using IPSec, there is a need to train the users on the security mechanism; especially when issuing keying material to the user. Why?

Question 3. Select all answers that apply (5pt) Web applications which enable malicious attackers to inject client-side script into web pages viewed by other users are called:

a) SQL Injections

b) Cross-Site Scripting (XSS), 

c) Injections Flaws

d) Cross-Site Request Forgery (CSRF)

e) Canonicalization

Question 4. Select all answers that apply. Simple Object Access Protocol (SOAP) is an XML based lightweight protocol for exchanging structured information in a decentralized distributed environment. (5pt) SOAP consists of  at minimum three parts, they include:

a) Envelope, Encoding, RPC 

b) Envelope, Encoding, Receiver

c) Sender, Encoding, Receiver 

d) Envelope, RPC, Receiver 

e) Envelope, Sender, Receiver

Question 5. True/False. (5pt) IP Firewalls are the first line of defense for the Web Services architecture and perform more than the traditional firewalls. If so why?

Question 6. Select all answers that apply. (5pt) Why are Bots are hard to detect:

a) Code is usually written in a way that is undetectable to anti-virus software 

b) Setup to run in background

c) Computer is running fast

d) Moving towards P2P

e) Use non-suspicious communications channels such as IRC, IM, HTTP(S)

Cellular Network and Security

Question 7. True/False. (5pt) Home Subscriber Server (HSS) stores static information for a subscriber. Why?

Question 8. (10pt) Identify one emerging technology we discussed in class that will impact you and/or your organization, describe the impact and summarize its benefits and drawbacks.

Question 9. (10pt) Discuss the impact that both Classless Inter-Domain Routing (CIDR) and Network Address Translation (NAT) have had on the migration from IPV4 to IPV6. Discuss other issues related to the migration.

Question 10. True or False (20pts)

a) SDN, NV, and NFV can work on existing networks because they reside on servers and interact with “groomed” traffic sent to them; True or False.

b) Remote monitoring (RMON) is designed for “flow-based” monitoring, while SNMP is often used for “device-based” management True or False

c) SNMP v2 can run on AppleTalk, IPX and OSI protocol stacks while SNMP v1 runs only over UDP. True or False

d) Spyware is software that enables continued privileged access to a computer while actively hiding its presence from administrators by subverting standard operating system functionality or other applications. True or False

e) Compare and contrast mobile QoS and network QoS.

Question 11. (10pts) Compare and contrast mobile QoS and network QoS.

Question 12: Use case (15pts)

During this class we discussed this term “Infrastructure, networking and security systems” to describe network technologies and technology disciplines that enable networked communications

Create a Use case for any organization. Describe the following: The data type, how it is transmitted, secured and managed.

Your use case should integrate with a minimum “three” of the following topical areas:

· Data Transmission

· Data Link Control

· LAN Architecture, protocols

· WAN Architecture, protocols

· Internet of Things

· Client Server

· Cloud computing

· Security technologies

· Wireless technologies

· Internet of Things

· TCP/IP

The use case should be at maximum (no more than) two pages.