project

CSCI620: Operating System Security Fall 2019

Project 2

This is an individual project.

Due date & time: 12:00pm on November 29, 2019. Submit through BlackBoard.

Late Policy: You will be given enough time to do this project. Try to do it as soon as possible. Do

not leave to the last minutes. Do not ask for extension!

Additional Instructions: (1) The submitted homework must be typed. Your name, Student ID

and course section number must be included in the cover page. (2) Save as PDF file.

Problem 1 Read the following paper and write a summary of what you have learned from it.

Length: One page.

Ross Anderson: Why Cryptosystems Fail. (Available from blackboard.)

Problem 2 Read “Authentication in an Internet Banking Environment” by Federal Financial

Institutions Examination Council (available from the blackboard).

Length: One page.

1. Write a set of guidelines on how users use passwords for an online bank. The guidelines should

cover how the passwords are chosen, used, and updated.

2. Analyze the user authentication mechanism in one online bank that you use. Try to see whether

it is vulnerable to various attacks, including phishing attacks.