author | Christian Urban <christian dot urban at kcl dot ac dot uk> |
Sun, 23 Nov 2014 15:34:32 +0000 | |
changeset 328 | 7ae9a893b76f |
parent 171 | 6cdf4d3906e2 |
child 350 | 54d6fc856950 |
permissions | -rw-r--r-- |
10 | 1 |
\documentclass{article} |
169
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
2 |
\usepackage{../style} |
10 | 3 |
|
4 |
\begin{document} |
|
5 |
||
6 |
\section*{Homework 1} |
|
7 |
||
8 |
\begin{enumerate} |
|
165
6f84ad98cf49
added homework
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
97
diff
changeset
|
9 |
\item {\bf (Optional)} If you want to have a look at the code |
169
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
10 |
presented in the lectures, install \texttt{Node.js} available (for free) from |
10 | 11 |
\begin{center} |
165
6f84ad98cf49
added homework
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
97
diff
changeset
|
12 |
\url{http://nodejs.org} |
10 | 13 |
\end{center} |
14 |
||
169
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
15 |
It needs aslo the Node-packages Express, Cookie-Parser, Body-Parser and |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
16 |
Crypto. They can be easily installed using the Node package manager \texttt{npm}. |
165
6f84ad98cf49
added homework
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
97
diff
changeset
|
17 |
|
10 | 18 |
|
19 |
\item Practice thinking like an attacker. Assume the following situation: |
|
169
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
20 |
|
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
21 |
\begin{quote}\it |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
22 |
Prof.~V.~Nasty gives the following final exam question (closed books, closed notes):\bigskip |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
23 |
|
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
24 |
\noindent |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
25 |
\begin{tabular}{@ {}l} |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
26 |
Write the first 100 digits of pi:\\ |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
27 |
3.\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
28 |
\end{tabular} |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
29 |
\end{quote} |
10 | 30 |
|
31 |
\noindent |
|
169
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
32 |
Think of ways how you can cheat in this exam? How would you defend |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
33 |
against such cheats. |
10 | 34 |
|
328
7ae9a893b76f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
171
diff
changeset
|
35 |
\item Here is another puzzle where you can practice thinking like an |
7ae9a893b76f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
171
diff
changeset
|
36 |
attacker: Consider modern car keys. They wirelessly open and close |
7ae9a893b76f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
171
diff
changeset
|
37 |
the central locking system of the car. Whenever you lock the car, |
7ae9a893b76f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
171
diff
changeset
|
38 |
the car ``responds'' by flashing the indicator lights. Can you think |
7ae9a893b76f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
171
diff
changeset
|
39 |
of a security relevant purpose for that? (Hint: Imagine you are in |
7ae9a893b76f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
171
diff
changeset
|
40 |
the business of stealing cars. What attack would be easier to |
7ae9a893b76f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
171
diff
changeset
|
41 |
perform if the lights do not flash?) |
7ae9a893b76f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
171
diff
changeset
|
42 |
|
165
6f84ad98cf49
added homework
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
97
diff
changeset
|
43 |
\item Explain what hashes and salts are. Describe how they can be used |
6f84ad98cf49
added homework
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
97
diff
changeset
|
44 |
for ensuring data integrity and storing password information. |
10 | 45 |
|
171
6cdf4d3906e2
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
169
diff
changeset
|
46 |
\item What is the difference between a brute force attack and a |
6cdf4d3906e2
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
169
diff
changeset
|
47 |
dictionary attack on passwords? |
6cdf4d3906e2
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
169
diff
changeset
|
48 |
|
14 | 49 |
\item What are good uses of cookies (that is browser cookies)? |
10 | 50 |
|
169
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
51 |
\item Why is making bank customers liable for financial fraud a bad |
2866fae8c1cf
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
165
diff
changeset
|
52 |
design choice for credit card payments? |
165
6f84ad98cf49
added homework
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
97
diff
changeset
|
53 |
|
10 | 54 |
\end{enumerate} |
55 |
||
56 |
\end{document} |
|
57 |
||
58 |
%%% Local Variables: |
|
59 |
%%% mode: latex |
|
60 |
%%% TeX-master: t |
|
61 |
%%% End: |