Subject Code : ITEC852
Country : Australia
ITEC852 - Advanced System and Network Security Assignment Help
Assignment Task:

Question 1 

A bank with 1,000 customers decides to use a different PIN entry method for cardless cash. It first assigns random 4-digit PINs to each of the 1,000 customers such that no two customers have the same PIN. At the ATM, each customer can authenticate simply by entering their PIN. The backend system can authenticate the customer based on the unique random PIN. You have been hired as a security consultant by the bank to analyze the security of this system. 

(a) Assume John is one of the customers. What is the probability that an attacker can guess John’s PIN in one try? 

(b) What is the probability that an attacker can guess any customer’s PIN in one try? 

(c) How many attempts are needed by an attacker to guess any customer’s PIN with probability at least 0.5? 

(d) You suggest to the bank that the customer should also enter a unique username. What issue does this mitigate? How is requiring a bank card in addition to entering a PIN different? 

Question 2 

Suppose you are coding an interactive program in Python to help kids learn mathematics. Using the input and eval function in Python you allow users to enter addition and multiplication expressions. More specifically, your program defines a variable y = 1, and then you allow users to enter expressions like y + 2 and y*3. The program then evaluates these expressions and prints the updated value of y. 

(a) Write the above program and show how you can (mis)use it to print your name 10 times.

(b) Could this vulnerability be exploited to run other (may be malicious) Python code? 

(c) How would you remove this vulnerability in the program? Hint: You do not need to use the same functions (e.g., eval). 

Question 3 

The birthday paradox states that if we generate random binary strings of length n, then we expect to find a collision in approximately √2n attempts. 

(a) Suppose n = 16. Write a program that counts and outputs the number of strings generated before a collision is found. Your program keeps a counter, generates random binary strings of length 16, stores them, and outputs the counter value once a collision is found. You should run a Monte Carlos simulation (e.g., repeat the program say a 1000 times and find the average). What is the average number of attempts before a collision is found? Please produce your code as well. 

(b) Explain what does this mean for the digest size in hash functions? 

Question 4 

In the lecture slides (week 4) on Kerberos, explain why B needs to check if the time stamp tA is fresh, i.e., within a small time interval around B s local time, when B is already checking if time stamp tA is in the validity period l?

Question 5

Suppose an organization has the following roles: director (D), group leader (G), team leader operations (TO), team leader technical (TT), and employee (E). We also have security labels for information which we denote with the same letters, i.e., D, G, TO, TT, E. You have been tasked to implement the following security policy: 

• Each role has access to information which is assigned the same security label, e.g., employee has access to information labelled E. 

• The employee has only access to information labelled E. 

• Each of the two team leaders have further access to information labelled E. 

• The group leader has further access to information labelled in the set {TO, TT, E}. 

• The director has further access to information labelled in the set {G, TO, TT, E}. 

• Any combination of roles, i.e., subset, has access to information labelled by the same subset. For example, the subset of roles {E, TO} has access to information labelled {E, TO}. 

• The subset of the two team leaders can have access to information labelled G (Hint: Think of upper bounds.) 

Draw a lattice diagram for the above security policy. 

Question 6 

Suppose a user study was carried out on 100 people to check the incidence of a rare disease. Jane was one of the participants. The result of the study showed that 90 out of the 100 people had the disease. Jane was one of the 10 who did not have the disease. The center who carried out the study made the stats public: “100 people participated in a study. 90 had disease.” Jane’s nosy neighbour Eve came to know that Jane was part of the study, and is curious to know if Jane has the disease or not. A few days later, there is a data breach disclosing the names of 99 participants together with the label indicating whether they had the disease or not. Luckily, Jane’s name was not in the data breach (the data entry person forgot to enter her name). 

(a) Explain how Eve can find out if Jane has the disease or not.

(b) Suppose instead of publishing the true count 90, the study applied differential privacy on the number of people with disease by publishing a = 90+Lap(1), where Lap(·) denotes a Laplace random variable of mean 0 and scale 1. Using the numpy.random.laplace(0, 1) from the Python library numpy, show 10 example outputs of a .

(c) Noting that the number 100 (the number of study participants) is still public information, explain how does the above mechanism protect Jane’s privacy even after the data breach.

This ITEC852 - Computer Science Assignment has been solved by our Computer Science experts at UniLearnO. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.

  • Uploaded By : Mitchell Lee
  • Posted on : October 09th, 2018
  • Downloads : 317

Whatsapp Tap to ChatGet instant assistance