Reference no: EM13334136

Answer the following questions:

1. List the three fundamental security properties and for each give an example of a failure.

2. If the useful life of DES was about 20 years (1977-1999), how long do you predict the useful life of AES to be? Justify your answer.

3. Security decision making should be based on rational thinking and sound judgement. In this context critique five security design principles with suitable examples.

4. The HTTP protocol is by definition stateless, meaning that it has no mechanism for "remembering" data from one interaction to the next. (a) Suggest a means by which you can preserve state between two HTTP calls. For example, you may send the user a page of books and prices matching a user's query, and you want to avoid having to look up the price of each book again once the user chooses one to purchase. (b) Suggest a means by which you can preserve some notion of state between two web accesses many days apart. For example, the user may prefer prices quoted in euros instead of dollars, and you want to present prices in the preferred currency next time without asking the user.

5. Why is a firewall a good place to implement a VPN? Why not implement it at the actual server(s) being accessed?