Question

Please answer the following questions and upload your answers om a file.

1. Consider the availability of various items related to a smart phone (data, voice, apps, and other services). What would be different ways to attack the availability of the phone? (10 points)

2. What would be ideal ways to defend against availability attacks you described in question number 1. (10 points)

3. A company requires employees to set 20 digit passwords, with letters, special characters, numbers, and asks them to change it every 2 weeks. What is the advantage and disadvantage of such a password policy? (5 points)

4. In the movie "Gattaca", the central character works in a company that authenticates employees into the office by taking a DNA sample from blood every morning. What is the advantage and disadvantage of such an approach towards authentication? (5 points)

5. Design a strong authentication system for the following scenario:
You are authenticating users of a library. The users all have smartphones. They are authenticated either in person at the library building, or over the Internet.

What type or types of authentication factor(s) will you choose here?
Explain the reasons behind your design decision. What are the advantages and disadvantages of the mechanism you chose? (20 points)

Answer 1

1. Availability of the phone can be attacked from various aspects by disrupting the availability of the apps on the phone , because the apps offer the basic functionlity of the phone to the user. second way is to disconnect the phone from the internet , mobilke phones are used mostly with the internet and the availability of the device will be lost if they are not connected to the internet and if the cellular network connection is hampered , the mobile phone will not be able to communiate with other and lose it availability. There is one more method that will totally lose the availablity is making unusable for the user by sending autonomous request to the phone to overload the device and hang it so that the user cannot use it.