Why is Cyberterrorism difficult to define? Many cybersecurity professionals believe the likely application of “cyber terrorism” to be an asymmetric attack against some portion of this nation’s critical infrastructure. Which critical infrastructure do you think to be a likely target and why? Who should be responsible for protecting that infrastructure, and why? Would this vary based on whom the attacker is—a state actor, a non-government organization, or an individual?

What level of security risk do you estimate for the following threat-asset matrix entries for the ACME Software Company

Question 1
C, PD – Confidentiality of Product Development. This includes disclosing information, tools, systems and data related to product development such as source code, documentation, and tool information to unauthorized individuals or groups.

High

Medium

Low

In cryptography and computer security, a man-in-the-middle attack (MITM), is an attack where the attacker secretly relays and possibly alters the communications between two parties who believe that they are directly communicating with each other.
(i) Describe how a man-in-the-middle attack may be performed on a Wi-Fi network and the consequences of such an attack.
(ii) Explain how a man-in-the-middle attack on a Wi-Fi network can be defeated.

Data Encryption Standard (DES)

Part A:

4.1 Briefly define a nonsingular transformation.

4.2 What is the difference between a block cipher and a stream cipher?

4.3 Why is it not practical to use an arbitrary reversible substitution cipher of the kind

shown in Table 4.1?

4.4 Briefly define the terms substitution and permutation.

4.5 What is the difference between diffusion and confusion?

4.6 Which parameters and design choices determine the actual algorithm of a Feistel

cipher?

4.7 What are the critical aspects of Feistel cipher design?

Part B: 

Refer to the above figure. Each group has a different input for “Left”, “Right” and “Round Key” as shown in the following table:

Each group need to find the value of L1 and R1?

Advanced Encryption Standard (AES)

6.1 What was the original set of criteria used by NIST to evaluate candidate AES ciphers?

6.2 What was the final set of criteria used by NIST to evaluate candidate AES ciphers?

6.3 What is the difference between Rijndael and AES?

6.4 What is the purpose of the State array?

6.5 How is the S-box constructed?

6.6 Briefly describe SubBytes.

6.7 Briefly describe ShiftRows.

6.8 How many bytes in State are affected by ShiftRows?

6.9 Briefly describe MixColumns.

6.10 Briefly describe AddRoundKey.

6.11 Briefly describe the key expansion algorithm.

6.12 What is the difference between SubBytes and SubWord?

6.13 What is the difference between ShiftRows and RotWord?

6.14 What is the difference between the AES decryption algorithm and the equivalent inverse cipher?

6.4 Given the plaintext {0F0E0D0C0B0A09080706050403020100} and the key

{02020202020202020202020202020202}:

a. Show the original contents of State, displayed as a 4 * 4 matrix.

b. Show the value of State after initial AddRoundKey.

c. Show the value of State after SubBytes.

d. Show the value of State after ShiftRows.

e. Show the value of State after MixColumns.