Cyber Forensics Questions

1. (a)       Discuss the evolution of firewalls (first-third generation) explaining the relative advantages/disadvantages of each.

(b)       With the aid of a diagram, explain the concept of a screened subnet firewall implementation.  What benefits does this offer over a simple dual-homed firewall?

2. (a)       Within the context of a wireless network, outline the protection offered; and, provide a brief description of a mechanism of attack against…

i)                   SSID cloaking

ii)                 MAC address restrictions

iii)               WEP encryption

iv)               WPA encryption

(b)      Why would you utilise a captive portal in a wireless network?

3. (a)       Attacks such as the Teardrop attack (or the Ping of Death) are unlikely to have any impact on modern computer hardware.  In what situation are these attacks useful (what type of targets)?

(b)       Why would an attacker focus effort on targeting the devices proposed in (a).

4. (a)       Define the term Denial of Service and explain the distinction between a DoS and DDoS attack.

(b)       Discuss the impact and respective advantages and disadvantages of an outbreak of a computer virus/worm (malware) compared with a DDoS attack.  Use an online retailer (e.g. eBay, Amazon etc.) as an example.

5. (a)       Describe the principle exchanges between client/server when initiating an SSL/TLS connection.  Include a diagram showing these exchanges and the sequence in which they occur.

(b)       What is the role of a Certificate Authority in the initiation of an SSL/TLS session?

(c)        Describe any disadvantages of an SSL/TLS encrypted web browsing session?

Last Completed Projects