COMP 424 Midterm 1

What is NOT a security goal or property?

Choose one which is NOT required to make the One-Time Pad unbreakable.

Choose one that does NOT describe the Stream Ciphers correctly.

What is the weakness of Electronic Code Book (ECB) encryption mode?

Choose the wrong description about UNIX access control

The Kasisky test for finding key length in Vigenere cipher is based on the observation that two identical segments of plaintext, will be encrypted to the same ciphertext, if they occur in the text at a distance ^ such that ^ is a multiple of m, the key length.

Diffie Hellman Key exchange protocol is based on Hardness of factoring a large number

Cross Site Scripting can occur when the web applications take user inputs that contain scripts and use them as part of the webpage

As a prevention of SQL injection attack, parameterized queries make it possible for the database to recognize the code and distinguish it from input data

In the access control model in Linux, the subject can be an object

When the system uses 128 bits of AES key for block cipher, to ensure collision resistance, how long of a hash output do you require to satisfy the Weakest Link Principle?

What access control principle does the following sentences describe? "This principle requires that all accesses to objects be checked to ensure they are allowed. Whenever a subject attempts to read an object, the operating system should interpose the action. First, it determines if the subject can read the object. If so, it provides the resources for the read to occur. If the subject tries to read the object again, the system should again check that the subject can still read the object."

What do the following sentences describe? "Guarded gates from user mode (space, land) into kernel mode (space, land). They change processor state from user mode to kernel mode so that CPU can access protected kernel memory."