Question

1. Why are inside attackers potentially more dangerous than external attackers?

2. List and describe the function of each field of an x.509 (v3) digital certificate (RFC3280). Hint: There are eight Basic Certificate Fields and a number of extensible options.

Field Function(s)

1. – _______________

2. – _______________

3. – _______________

4. – _______________

5. – _______________

6. – _______________

7. – _______________

8. – _______________

Answer 1

Please UPVOTE my answer if you find this explaination to be helpful !!

SOLUTION 1

Frankly speaking its very difficult to differentiate between an insider attacker and an outsider attacker.Either of these attackers do posses a potential negative impact.

But The Inside Attackers do have a lead over the External Attackers for the following reasons :

a)Insider attackers are always a bigger threat as they have physical access and more potential.

b)A malicious attacker is more dangerous than a group of sophisticated attacker because they already have the keys to the data. Whereas external attackers first need to search for data only then can they sell or use to make a profit

c)Most importantly Inside Attackers are difficult to track down than external attackers because the insider attackers knows all the loopholes better than the external ones.

SOLUTION 2

Here is the list of fields and their functions-

• Version – It implies which X.509 version applies to the certificate (i.e., it indicates what data the certificate must include)
• Serial number – the identity creating the certificate must assign it a serial number that distinguishes it from other certificates
• Algorithm information – the complete information about the algorithm used by the issuer to sign the certificate
• Issuer distinguished name – the name of the body issuing the certificate (usually a certificate authority)
• Subject public key information – the public key associated with the identity
• Subject distinguished name – the name of the identity the certificate is issued to
• Validity period of the certificate – begin/end date and time
• Extensions (optional)

Please UPVOTE my answer if you find this explaination to be helpful !!