• Attempt any five questions.
• All questions carry equal marks.
Which are more threatening to cyber security between viruses and worms? Describe precisely.
Illustrate, how password-based authentication system contributes to strengthening Secure System Design.
Determine the conceptual differences between Spoofing and Session Hijacking.
Talk about the different issues and challenges of cybercrime. Also explain the power and characteristics of cyber terrorism.
Discuss the importance of digital signatures and certificates in the formation of SSL/TLS-based sessions.
Analyse how phishing and pharming assaults have affected various web-based transactions.
Write short note on "Strategies to tackle Cyber Crime and Trends".
Consider the following script:
<html>
<body>
<form name="attack_form"
action="http://VULNERABLE_APP/attack.php"
method="POST">
<input type="hidden" name="attack_param"
value="POST_ATTACK">
</form>
<script type="text/javascript">
document.attack_form.submit();
</script>
</body>
</html>
What type of vulnerabilities can be possible with the above script? Justify your answer with proper explanation.
user=request.POST['user_name'] passwd=request.POST['password'] query1="SELECT id FROM users WHERE username='"+ user+"' AND password='"+ passwd+"'" database.execute(query1) Analyse the above statements for any threat? If it exists, write the alternative statements to make them safe.
Explain Electronic Signature Certificate. What are the duties of subscriber in relation to it?
Discuss the roles of Document Object Model (DOM) in web security. What is cross-window attack?
Explain the role of cookies in enhancing threats against various web applications?
What are the different types of offence in Information Technology Act 2000? Discuss cyber offence control mechanism under this Act.
How can attacker inject the malicious code in a specific address and execute it as per requirement using buffer overflow attack? - Explain it with suitable example.
Discuss the different issues and challenges of cybercrime? Also explain the power and characteristics of cyber terrorism.
Discuss the importance of TLS handshaking in a secure session establishment.