Great Deal! Get Instant $10 FREE in Account on First Order + 10% Cashback on Every Order Order Now

Task This assessment aims to develop and gauge student understanding of the key topics covered so far by answering the following questions. Answering these questions will help you build some...

1 answer below »
Task

This assessment aims to develop and gauge student understanding of the key topics covered so far by answering the following questions. Answering these questions will help you build some understanding for the next assessment item as well as for the entire subject. It is expected that answers to the assignment questions be succinct (i.e. precise and concise) with all sources of information fully referenced as per APA referencing style. You have to reference the text book and any additional material you have used in your answers.

Note that the guide for APA referencing is provided in the resources section of Interact site of this subject.


Answers MUST be written in your own words. If an answer contains more than 10% direct quote (referenced or unreferenced), 0 marks will be awarded for this question. One or two sentence answers will be too short and only receive low marks. Answers longer than 1.5 pages (12 point font, single line spacing) may incur a penalty if too much non-relevant information is stated. For mathematical questions it is expected that you show intermediate steps of your working. Just stating the correct solution will result in low marks, on the other hand if the working is correct and you only made minor mistakes, you will still be awarded marks, even though the final answer is wrong.

Question 1 [5 Marks]

Automated Teller Machines (ATM) are designed so that users will provide a personal identification number (PIN) and a card to access their bank accounts. Give examples of confidentiality, integrity and availability requirements associated in such a system and describe the degree of importance for each requirement.

Question 2 [5 Marks]

A thief broke into an Automated Teller Machine (ATM) using a screwdriver and was able to jam the card reader as well as breaking five keys from the keypad. The thief had to halt the process of break-in and hide, as a customer approached to use the ATM. The customer was able to successfully enter their ATM card, punch in the 4 digit PIN and was able to draw out some cash. Since the card reader was jammed, the customer was however not able to withdraw the ATM card, and drove off to seek some help. In the meantime, the thief came back and decided to try to discover the customer’s PIN so that he can steal money from the customer. You are required to calculate the maximum number of PINs that the thief may have to enter before correctly discovering the customer’s PIN?

Question 3 [5 Marks]

Thinking about bio-metric authentication, list three reasons why people may be reluctant to use bio-metrics. Describe various ways of how to counter those objections.

Question 4 [5 Marks]

In bio-metric authentication, false positive and false negative rates can be tuned according to the requirement, and they are often complementary i.e. raising one lowers the other. Describe two circumstances where false negatives are significantly more serious than false positives.

Question 5 [10 Marks]

Transposition is one known method of encrypting the text. What can be one way that a piece of cipher text can be determined quickly if it was likely a result of a transposition? Utilising some of the decryption techniques (substitution and others) covered in the subject so far, you are required to decipher (find the plain text) the cipher text that will be proviced to you closer to the assessment due date via the subject site. In order to present your solution, you need to demonstrate and explain the steps taken to decipher this text.

Rationale

The assessment task is aligned with the following learning outcomes of the subject:
• be able to justify security goals and the importance of maintaining the secure computing environment against digital threats;
• be able to explain the fundamental concepts of cryptographic algorithms;
• be able to examine malicious activities that may affect the security of a computer program and justify the choice of various controls to mitigate threats.
• be able to compare and contrast the security mechanisms of a trusted operating system with those used in a general purpose operating system;

Marking criteria
Question HD
100% - 85%
DI
84% - 75%
CR
74% - 65%
PS
64% - 50%
FL
49% - 0
Question1In depth use of a good range of relevant literature to address the points. Provides an extensive range of examples of the CIA triad with sound evidence of synthesis of own research and prescribed readings in topics.Evidence of using relevant literatureI to address the points. Provides a detailed range of examples of the CIA triad with evidence of synthesis of external readings and prescribed readings in topics.

Use of some relevant literature to address the points. Provides some examples of the CIA triad. Mostly cited the prescribed text. Evidence of synthesised concepts learned from topic readingsLimited evidence of using relevant literature to address the points. Provides limited examples of the CIA triad with little evidence of linkages or connections to topic readings.

No evidence of using relevant literature to address the points. No examples provided with extremely limited or no linkages or connections to topic readings.

Question 2

The answer is correct with a complete, clear, and detailed step-by-step working provided of how the answer was calculated.

The answer is correct with a complete, clear, and step-by-step working provided of how the answer was calculated.The answer is correct showing most steps of how the answer was calculated.
The answer is correct however the steps taken to reach the answer are not shown clearly.
The answer is incorrect and the steps taken to reach the answer are not shown clearly.
Question 3Clear, comprehensive description of biometric authentication and why general population may object to using this technique. Critical points identified & discussed.Detailed description of biometric authentication and why general population may object to using this technique. Many critical points identified & discussed.Good description of biometric authentication and why general population may object to using this technique. Some critical points identified & discussed.Some description of biometric authentication and why general population may object to using this technique. Some critical points identified & discussed with minor inaccuracies or omissions.Incomplete or inadequate description of biometric authentication and why general population may object to using this technique. No critical points identified & discussed.
Question 4Clear, comprehensive description discussion of two circumstances where false negatives are significantly more serious than false positives in biometric buthentication listing all critical points.Detailed description discussion of two circumstances where false negatives are significantly more serious than false positives in biometric buthentication. Many critical points identified & discussed.Good description discussion of two circumstances where false negatives are significantly more serious than false positives in biometric buthentication. Some critical points identified & discussed.Some description discussion of two circumstances where false negatives are significantly more serious than false positives in biometric authentication. Some critical points identified & discussed with minor inaccuracies or omissions.Incomplete description discussion of two circumstances where false negatives are significantly more serious than false positives in biometric authentication. No critical points identified & discussed.
Question 5

Correct identification of how to quickly identify if transposition techniques have been used. Correct decryption of the message has been provided along with a clear, concise and step by step explanation of the decryption technique used.

Correct identification of how to quickly identify if transposition techniques have been used. Correct decryption of the message has been provided along with a clear, and step by step explanation of the decryption technique used.

Correct identification of how to quickly identify if transposition techniques have been used. Correct decryption of the message has been provided along with a step by step explanation of the decryption technique used.

Correct identification of how to quickly identify if transposition techniques have been used. Correct decryption of the message has been provided with limited explanation of the decryption technique used.

incorrect identification of how to quickly identify if transposition techniques have been used. Inorrect decryption of the message provided along with little or no explanation of the steps detailing the decryption technique used.

Presentation

  • The assessment must be submitted electronically with a Cover Page that includes the following information:
    • Assessment No
    • Assessment Title
    • Student Name & ID
    • Subject Name and Code
    • Student Email Address
  • Students must ensure that all tasks/questions are identified clearly with headings.
  • Answers to the questions must be in your own words and should be precise but complete and informative. No marks will be awarded for any answer containing more than 10% direct quotes (referenced or un referenced).
  • APA reference style must be used throughout the document with the bibliography at the end of the document. In-text citations should also follow APA style. APA referencing guide can be accessed via the following link. This also forms a part of the marking rubric.http://student.csu.edu.au/study/referencing-at-csu


Please note: Assessment MUST be submitted as ONE MS Wword file via Turnitin. Please do not submit *.zip or *.rar or multiple files. Assessments are marked and feedback is attached using a MS Word based tool. Reports that are submitted in PDF format will be re-formatted to Word format in order to be marked. Allowances will not be made for any loss of information, diagrams or images as a result of the re-formatting.


Answered Same Day Apr 06, 2020

Solution

Vidhi answered on Apr 08 2020
128 Votes
Answer-1
Confidentiality
The card and the PIN (personal verification number) use by the customer should be confidential.
So that customer can access the ATM confidentially and the host system as well as the communication channel will be confidential
Degree of important
PIN must be encrypted hence the transaction itself will be confidential
Integrity
The customer uses the PIN to access, so that customer expect to be integrity that the PIN number not changes while traction between host and server.
And, the Withdraw amount entered by the customer should be communicated co
ectly.
Degree of important
Inappropriate communication may reflect in the transaction amounts
Availability
The customer can send and receive money through the internet banking and through ATM the customer should able to send feedback to the bank.
Degree of Important
Both the receiving and sending the message is freely allowed in the network without interference.
Answer-2
Assume the Automated Teller Machine (ATM) has total 10 number of keys which are (0-9) keys. The thief
oke 5 of them, remaining five keys are working now. The customer successfully entered the 4-digit PIN but not able to withdraw the money.
Total number of keys =10
Broken keys =5
Remaining working keys =5
Number of digits in customer’s PIN =4
5*4 = 20
The number of digits thief has to enter is 4 and the possible combination are start from 0000 to 9999,becuese these are the smallest and highest combinations respectively.
Other approach is attempt each conceivable mix in progression, beginning with 0 and proceeding to 9999. what number of mixes would you need to attempt in a most dire outcome imaginable (i.e., if the right blend is the last choice you attempt)? There are nine decisions for the principal digit, nine for the second one likewise, et cetera. The aggregate number of conceivable a
angements would be 95, which is around 1600—an overwhelming e
and! Maybe we can refine our technique to speed things up a bit.
An intriguing element of these keypads is that a portion of the ATM don't require an "enter" key. This implies they take an un
oken stream of numbers until the point that the right five digits are entered in a
angement. In this way, we could mastermind each of the 60,000 conceivable codes into one long string, 300,000 digits long, which would resemble this: 11111 11112 11113… 99998 99999. Is this the best technique to apply? Obviously not.
We can see that there are numerous covering areas of the diverse codes, the a
angement 1111, for instance. Entering this example a bigger number of times than we have to would be excess and would be a significant exercise in futility. Might we, rather, search for a shorter a
angement that exploits these covers and still contains all the conceivable...
SOLUTION.PDF

Answer To This Question Is Available To Download

Related Questions & Answers

More Questions »

Submit New Assignment

Copy and Paste Your Assignment Here