Web site distinguish between lack of capacity and a denial-o
1. The information transfer path by which unauthorized data is obtained is referred to as an _________ channel
Answer:
2. ______________ is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.
Answer:
3. Gust OSs are managed by a __________, or VMM, that coordinates access between each of the guests and the actual physical hardware resources..
Answer:
SHORT ANSWER QUESTION
4. How can a web site distinguish between lack of capacity and a denial-of-service attack? For example, web sites often experience a tremendous increase in volume of traffic right after an advertisement with the site’s URL is shown on television during the broadcast of a popular sporting event. That spike in usage is the result of normal access that happens to occur at the same time. How can a site determine that high traffic is reasonable?
5. What are some of the individual rights associated with information privacy? Do expectations of privacy change depending on the individual’s environment? If so, how?
6. Why is a firewall a good place to implement a VPN? Why not implement it at the actual server(s) being accessed?
7. Assume you operate an Apache-based Linux Web server that hosts your company’s e-commerce site. Assume further that there is a worm called “WorminatorX,” which exploits a (fictional) buffer overflow bug in the Apache Web server package that can result in a remote root compromise. Construct a simple threat model that describes the risk this represents: assets, vulnerability, attack-vector, attacker(s), likelihood of occurrence, likely impact, and plausible mitigations
8. Consider a popular DRM system like Apple’s FairPlay, used in to protect audio tracks purchased from the iTunes music store. If a person purchased a track from the iTunes store by an artist managed by a record company such as EMI, identify which company or person fulfils each of the DRM component roles shown in Figure 19.3 of Stallings& Brown.
