CS 465 Introduction to Computer Security Homework Assignment #2

Assigned: Thursday, October 4, 2012 Due: Thursday, October 11, 2012 at the beginning of the class (HARD COPY) No assignments will be accepted after 9:30 am on Tuesday, October 16, 2012 Name Student ID 1 /5 2 /5 3 /45 4 /10 5 /15 Total /80

1. Describe at least three ways computer viruses can spread. (5 points) 2. Explain why computer worms are bigger threat to computer security than computer viruses. (5 points) 3. Search the Web and/or professional journals for information on (1) Sapphire/Slammer worm, (2) Samy worm, and (3) Android.Nickispy malware. For each of them briefly address the following points. a. The vulnerability (vulnerabilities) it has exploited b. The way it spread c. How fast it spread d. The effect it had on systems e. How hard/easy it was to clean the system from the worm. (45 points)
4. For each of the following statements, indicate if they are true or false. If a statement is false, restate it to be true. Provide an argument why the original or restated statement is true. a. Same password should be used a long period of time. [ ] True [ ] False b. UNIX stores the password in an encrypted form. [ ] True [ ] False c. The most efficient attacks on passwords are based on brute force attacks. [ ] True [ ] False d. Users should be assigned long, randomly generated passwords. [ ] True [ ] False e. Using a Pass Phrase typically leads to a good password. [ ] True [ ] False (10 points)

CS 465 Homework #2

Page 1 of 2

5. Assume that a user chooses a four characters long password. Password characters may be any
uppercase and lowercase alphabetic character and any digit. a. How much time would it take to determine a particular password using a brute force attack (trying all possible passwords) assuming that testing an individual password requires 1 second? (5 points) b. What we can conclude about this password? Present guidelines for selection of good passwords. (5 points) c. If the cutoff between insecure and secure password is one year of testing time,

determine the length of a secure password. (5 points)

(Total: 15 points)

CS 465 Homework #2

Page 2 of 2