CS627 Midterm Solved Subjective Fall 2024-25 by MS Team

The CFE string (Common Platform Enumeration - CPE Formatted Entry) for Microsoft Windows 2007 (likely referring to Windows 7) follows the standard CPE format used in cybersecurity tools like Qualys, Nessus, and NIST's NVD (National Vulnerability Database).

cpe:/o:microsoft:windows_7

Breaking Down the CFE String:

•  cpe:/o → Represents an operating system
•  microsoft → Vendor name
•  windows_7 → Product name

Example for Specific Editions:

 Windows 7 Professional:

cpe:/o:microsoft:windows_7:professional

 Windows 7 Ultimate:

cpe:/o:microsoft:windows_7:ultimate

Q3. What are the two types of IDS (Intrusion Detection Systems)?

o Host-based IDS (HIDS): Monitors activity on individual devices (hosts).

Q1. What are the challenges and vulnerability exploits? Write the names of two password vulnerabilities and how they can be exploited?

o Challenges in Cybersecurity:

 Increasing complexity of systems.  Advanced persistent threats (APT).  Insider threats.  Lack of user awareness.

o Two Password Vulnerabilities & How They Are Exploited:

1. Brute Force Attack: Attackers try all possible password combinations until they find the correct one. 2. Rainbow Table Attack: Attackers use precomputed hash values of common passwords to match against stolen password hashes.

In the context of RSA, given that n = 143, e = 7, d = 103, how to encrypt when M = 30?

What are the two methods to save a password?

Plain Text Storage (not recommended as it is insecure). Hashing with Salt (recommended to prevent attacks like Rainbow Table Attack).

1. Malware Examples

o Virus o Worm o Trojan Horse o Ransomware o Spyware

2. AAA Authentication

o AAA (Authentication, Authorization, and Accounting) is a

framework for controlling access to systems and resources.  Authentication: Verifies user identity.  Authorization: Grants permissions based on identity.