Homework
CS651 – A03 – Security Engineering
Team Members:
1 – Describe “Security Architecture” to a nontechnical person 3-4 sentences. (4)
<your answer>
2 – How does an operating system architecture affect security? Provide a brief explanation and give 2 examples. (6)
<your answer>
3 – What is “Data Execution Prevention? (2)
<your answer>
4 – What is a microkernel and how does it differ from a monolithic kernel? Include an example of each type. (5)
<your answer>
5 – What is a Common Criteria Protection Profile? Pick two that might be of use to YAP and explain why. (5)
<your answer>
6 – Explain Kerckhoff’s Principle and its importance. (2)
<your Answer>
7 – What is a keyspace and why is it important? (2)
<your answer>
8 – Explain how “locks” can defeat a TOC/TOU attack (4)
<your answer>
9 – Explain how Eve would create a Chosen-Plaintext Attack on Alice’s messages to Bob and provide an example. (4)
<your answer>
10 – Summarize the PKI with an example and explain how certificates help make it secure in ½ page. (8)
<your answer>
11 – Compare the Clarke-Wilson and the Biba model in 5-6 sentences and give an example of how each works. (10)
<your answer>
12 – Explain how a digital envelope works in 4-6 sentences. (5)
<your answer>
14 – Review https://apprenda.com/library/paas/iaas-paas-saas-explained-compared/ and other sources, then define IaaS, SaaS, and PaaS in 2-3 sentences each (in your own words, of course). (10)
<your answer>
15 – Decide which of these models (in the previous question) would work best for YAP and explain your logic in 4-5 sentences. (10) (Remember, there is no “right” answer. There is, however, sensible logic)
<your answer>
16 – Address space layout randomization (ASLR) has been used for several years in Windows operating systems, but has not stopped attacks from succeeding. Explain why in ¼ page. (10)
<your answer>
<your answer>
Page 1 of 2