Task 1: Organizational Structure of the Security Team

A. Organizational Chart

CISO

Security Analyst Security Engineer Security Manager

Incident Response Specialist Security Awareness & Training Specialist

B. Justification for Each Role

1. CISO (Chief Information Security Officer)

As the head of the information security department, the CISO will be responsible for developing and
implementing the security strategy, overseeing the security team, and ensuring the company's
information assets are protected.
2. Security Analyst
The Security Analyst will be responsible for monitoring the company's networks for security breaches
and investigating violations when they occur. They will also be tasked with analyzing security measures
and recommending improvements.
3. Security Engineer
The Security Engineer will be responsible for implementing and maintaining security solutions, such as
firewalls, antivirus systems, and other protective measures. They will work closely with the Security
Analyst to address any vulnerabilities.
4. Security Manager
The Security Manager will oversee the day-to-day operations of the security team, ensure compliance
with security policies, and coordinate with other departments to ensure security measures are integrated
into all aspects of the company's operations.
5. Incident Response Specialist
 Reporting to the Security Engineer, this role will focus on responding to and mitigating security
incidents. They will develop and implement incident response plans and coordinate the response efforts
during a security breach.
6. Security Awareness & Training Specialist
This specialist will develop and deliver security awareness training to employees, ensuring that
everyone understands their role in maintaining the company's security. They will also create educational
materials and conduct regular security awareness campaigns.

C. Job Description of Each Role

1. CISO
Responsibilities
Develop and implement the information security strategy, oversee the security team, ensure compliance
with regulatory requirements, report on the status of security initiatives to senior management.
Qualifications
Extensive experience in information security, leadership skills, strong understanding of regulatory
requirements, excellent communication skills.

2. SECURITY ANALYST
Responsibilities
Monitor network traffic for suspicious activity, analyze security alerts, investigate security breaches,
recommend improvements to security measures.
Qualifications
Experience in network security, analytical skills, familiarity with security tools, strong problem-solving
abilities.

3. SECURITY ENGINEER
Responsibilities
Implement and maintain security systems, conduct vulnerability assessments, collaborate with IT staff to
ensure security measures are effective, troubleshoot security issues.
Qualifications
Experience in system and network security, strong technical skills, knowledge of security tools and
protocols, problem-solving skills.

4. SECURITY MANAGER
Responsibilities
Oversee daily security operations, ensure compliance with security policies, coordinate with other
departments, manage security projects.
 Qualifications
Experience in security management, strong organizational skills, knowledge of security policies and
procedures, leadership abilities.

5. INCIDENT RESPONSE SPECIALIST

Responsibilities
Develop and implement incident response plans, respond to security incidents, conduct post-incident
analysis, coordinate with other security team members.
Qualifications
Experience in incident response, strong problem-solving skills, ability to work under pressure,
knowledge of security protocols.

6. SECURITY AWARENESS & TRAINING SPECIALIST

Responsibilities
Develop security awareness training programs, deliver training to employees, create educational
materials, conduct regular security awareness campaigns.
Qualifications
Experience in training and education, strong communication skills, knowledge of security best practices,
creativity in developing training materials.

Task 2: Information Security Processes and Procedures

A. Proposed Information Security Processes and Procedures
1. Access Control Management
2. Incident Response Plan
3. Data Backup and Recovery
4. Security Awareness Training
5. Regular Security Audits
6. Vulnerability Management
7. Network Security Monitoring
8. Patch Management
9. Physical Security Controls
10. Secure Software Development Lifecycle (SDLC)

B. Detailed Explanation of One Process and One Procedure

Process: Incident Response Plan
 Purpose
To ensure a quick and effective response to security incidents to minimize damage and recover from
incidents as swiftly as possible.
Steps
1. Preparation
Establish and train an incident response team, and develop incident response policies and procedures.

2. Identification
Detect and identify potential security incidents through monitoring and alerts.

3. Containment
Limit the spread of the incident to prevent further damage.

4. Eradication
Remove the cause of the incident and clean up affected systems.

5. Recovery
Restore systems to normal operations and monitor for any signs of recurrence.

6. Lessons Learned
Conduct a post-incident review to identify improvements to the response plan.

Procedure: Data Backup and Recovery

Purpose
To ensure that critical data is backed up regularly and can be restored in the event of data loss.
Steps
1. Identify Critical Data
Determine which data needs to be backed up.

2. Schedule Regular Backups

Set up a schedule for regular data backups.

3. Store Backups Securely

Ensure backups are stored in a secure location, preferably offsite.

4. Test Backups
Regularly test backup files to ensure they can be restored successfully.

5. Document the Procedure

Maintain detailed documentation of the backup and recovery process.

Task 3: Major Risks and Threats

A. Lists of Risks, Threats, and Vulnerabilities
1. People

➢ Risks
❖ Lack of security awareness among employees
❖ Improper operating procedures
❖ Negligence in handling sensitive information

➢ Threats
❖ Insider threats from disgruntled employees
❖ Social engineering attacks
❖ Unintentional data breaches due to human error

➢ Vulnerabilities
❖ Unattended machines
❖ Failure to turn off computers
❖ Printing sensitive material

2. Processes

➢ Risks
❖ Inadequate standard operating procedures
❖ Lack of formal documentation of business processes
❖ Failure to backup information

➢ Threats
❖ Disruption of operations due to inadequate processes
❖ Non-compliance with regulatory requirements

➢ Vulnerabilities
❖ Inadequate access control
❖ Lack of secure identification and authentication techniques
❖ Nil audit logs

3. Technology

➢ Risks
 ❖ Use of inferior and untested software
❖ Limited antivirus software
❖ Failure to secure hardware adequately

➢ Threats
❖ Malware and virus attacks
❖ Data corruption and loss
❖ Physical damage to hardware

➢ Vulnerabilities
❖ Unsecured laptops
❖ Effects from the physical environment causing damage
❖ Lack of restrictions on specific files when certain applications are operating
Here's a Python program that implements the RSA encryption and decryption algorithm. This program allows the
user to input large prime numbers, a message, and then performs the encryption and decryption.

import sympy

def gcd(a, b):

while b != 0:
a, b = b, a % b
return a

def modinv(a, m):

m0, x0, x1 = m, 0, 1
if m == 1:
return 0
while a > 1:
q = a // m
m, a = a % m, m
x0, x1 = x1 - q * x0, x0
if x1 < 0:
x1 += m0
return x1

def rsa_keygen(p, q):

n=p*q
phi = (p - 1) * (q - 1)

e = 65537 # Common choice for e

while gcd(e, phi) != 1:
e += 2

d = modinv(e, phi)
 return ((e, n), (d, n))

def encrypt(plaintext, public_key):

e, n = public_key
ciphertext = [pow(ord(char), e, n) for char in plaintext]
return ciphertext

def decrypt(ciphertext, private_key):

d, n = private_key
plaintext = ''.join([chr(pow(char, d, n)) for char in ciphertext])
return plaintext

def main():
print("RSA Encryption/Decryption")
p = int(input("Enter a large prime number p: "))
q = int(input("Enter a different large prime number q: "))

if not [Link](p) or not [Link](q):

print("Both numbers must be prime.")
return
message = input("Enter the message to encrypt: ")
public_key, private_key = rsa_keygen(p, q)
print(f"Public Key: {public_key}")
print(f"Private Key: {private_key}")
encrypted_msg = encrypt(message, public_key)
print(f"Encrypted message: {encrypted_msg}")

decrypted_msg = decrypt(encrypted_msg, private_key)

print(f"Decrypted message: {decrypted_msg}")

if __name__ == "__main__":
main()
Explanation

1. GCD and Modular Inverse Functions

➢ gcd(a, b): Computes the greatest common divisor using the Euclidean algorithm.
➢ modinv(a, m): Computes the modular inverse using the extended Euclidean algorithm.

2. Key Generation (rsa_keygen(p, q))

➢ Takes two large prime numbers p and q.
➢ Computes n = p * q and Euler's totient phi = (p - 1) * (q - 1).
➢ Selects an encryption exponent e (commonly 65537) that is coprime with phi.
➢ Computes the decryption exponent d which is the modular inverse of e modulo phi.
➢ Returns the public key (e, n) and the private key (d, n).

3. Encryption and Decryption

➢ encrypt(plaintext, public_key): Encrypts the message using the public key.
➢ decrypt(ciphertext, private_key): Decrypts the message using the private key.

4. Main Function
➢ Takes user input for prime numbers p and q.
➢ Validates if the input numbers are prime.
➢ Takes the plaintext message to be encrypted.
➢ Generates the public and private keys.
➢ Encrypts and then decrypts the message, displaying the results.

How to Run the Program

1. Save the code to a file, e.g., [Link].
2. Run the program using Python:
python [Link]
3. Follow the prompts to enter the prime numbers and the message.
 TUTORIALS

1. Given a Class C IP address of [Link], what is the range of usable IP addresses for the
subnet mask [Link] (/26)?

A. Usable IP Address Range for Subnet Mask [Link] (/26) for Class C IP Address [Link]
Subnet Mask: [Link] (/26)
Binary: 11111111.11111111.11111111.11000000
The `/26` subnet mask means that the first 26 bits are used for the network portion and the remaining 6 bits
are for hosts.
Network Address: [Link]
Range calculation:
Subnet increment: (256 - 192 = 64)

B. The subnets and their ranges are:

Subnet 1: [Link] - [Link]
Usable IPs: [Link] - [Link]
Subnet 2: [Link] - [Link]
Usable IPs: [Link] - [Link]
Subnet 3: [Link] - [Link]
Usable IPs: [Link] - [Link]
Subnet 4: [Link] - [Link]
Usable IPs: [Link] - [Link]

2. You have a Class C network with an IP address of [Link]. How many subnets and hosts
per subnet can you get if you use a /28 subnet mask?
Subnets and Hosts per Subnet for a Class C Network with /28 Subnet Mask
Network: [Link]
Subnet Mask: [Link] (/28)
Binary: 11111111.11111111.11111111.11110000
The `/28` subnet mask means that the first 28 bits are for the network, and the remaining 4 bits are for hosts.
Number of subnets: (2^4 = 16) subnets
Number of hosts per subnet: (2^4 - 2 = 14) hosts (subtracting 2 for network and broadcast addresses)
3. For the network [Link]/27, identify the first and last usable IP addresses in this subnet.
Also, provide the subnet and broadcast addresses.

First and Last Usable IP Addresses for [Link]/27

Subnet Mask: [Link] (/27)
Binary: 11111111.11111111.11111111.11100000
The `/27` subnet mask means that the first 27 bits are for the network, and the remaining 5 bits are for hosts.
Subnet increment: ( 256 - 224 = 32)
For the subnet [Link]/27:
Range: [Link] - [Link]
Network Address: [Link]
First Usable IP: [Link]
Last Usable IP: [Link]
Broadcast Address: [Link]

4. If you need to create 4 subnets from a Class C network with an IP address of [Link],
what subnet mask should you use? Also, list the range of addresses in each subnet.
Subnet Mask for 4 Subnets from a Class C Network [Link]
Number of subnets needed: 4
(2^2 = 4), so we need 2 bits for the subnetting
This means we use a `/26` subnet mask:
Subnet Mask: [Link] (/26)
Binary: 11111111.11111111.11111111.11000000
Subnets and their ranges:
Subnet 1: [Link] - [Link]
Usable IPs: [Link] - [Link]
Subnet 2: [Link] - [Link]
Usable IPs: [Link] - [Link]
Subnet 3: [Link] - [Link]
Usable IPs: [Link] - [Link]
Subnet 4: [Link] - [Link]
Usable IPs: [Link] - [Link]

5. You are given two subnets: [Link]/26 and [Link]/26. Explain whether these
subnets overlap and how you determined this.
 Subnet Overlap Check: [Link]/26 and [Link]/26
Subnet 1: [Link]/26
Range: [Link] - [Link]
Subnet 2: [Link]/26
Range: [Link] - [Link]
Since the ranges do not overlap, the subnets do not overlap.

6. A company has a Class C network [Link] and needs to create subnets for four
departments. Department A requires 60 hosts, Department B requires 30 hosts, Department
C requires 12 hosts, and Department D requires 6 hosts. Design an efficient subnetting
scheme that conservatively allocates IP addresses for each department.
Subnetting Scheme for [Link] for Four Departments
Department A: Requires 60 hosts
Nearest power of 2: 64 (so we need a /26 subnet mask)
Subnet: [Link] - [Link]
Usable IPs: [Link] - [Link]

Department B: Requires 30 hosts

Nearest power of 2: 32 (so we need a /27 subnet mask)
Subnet: [Link] - [Link]
Usable IPs: [Link] - [Link]

Department C: Requires 12 hosts

Nearest power of 2: 16 (so we need a /28 subnet mask)
Subnet: [Link] - [Link]
Usable IPs: [Link] - [Link]

Department D: Requires 6 hosts

Nearest power of 2: 8 (so we need a /29 subnet mask)
Subnet: [Link] - [Link]
Usable IPs: [Link] - [Link]

7. You find a device with an IP address of [Link] and a subnet mask of [Link].
Determine the network address, the broadcast address, the range of valid IP addresses, and
the total number of hosts in this subnet.
Network Details for IP [Link] with Subnet Mask [Link]
Subnet Mask: [Link] (/27)
Binary: 11111111.11111111.11111111.11100000
The `/27` subnet mask means that the first 27 bits are for the network, and the remaining 5 bits are for hosts.
Subnet increment: (256 - 224 = 32)
For the subnet containing [Link]:
Network Address: [Link]
Broadcast Address: [Link]
Range of Valid IPs: [Link] - [Link]
Total Number of Hosts: (2^5 - 2 = 30) (5 bits for hosts, subtracting 2 for network and broadcast addresses)
1. Explain the OSI model and describe the function of each layer.
The OSI (Open Systems Interconnection) model is a conceptual framework used to understand network
interactions in seven distinct layers.

These include:
➢ Physical Layer
Handles the transmission of raw data bits over a physical medium.

➢ Data Link Layer

Manages node-to-node data transfer and error detection/correction.

➢ Network Layer
Responsible for logical addressing and routing of packets.

➢ Transport Layer
Ensures end-to-end communication, error recovery, and flow control.

➢ Session Layer
Manages sessions or connections between applications.

➢ Presentation Layer
Translates data between the application layer and the network, ensuring data format compatibility.

➢ Application Layer
Provides network services directly to user applications (e.g., HTTP, FTP).

2. What is the purpose of subnetting in a network?

Subnetting divides a larger network into smaller, more manageable sub -networks (subnets). It improves
network performance and security by reducing broadcast domains and allowing better IP address allocation.

3. Describe the differences between IPv4 and IPv6.

➢ Address Length
IPv4 addresses are 32-bit (e.g., [Link]), while IPv6 addresses are 128-bit (e.g.,
2001:0db8:85a3:0000:0000:8a2e:0370:7334).

➢ Address Space
IPv4 supports around 4.3 billion addresses, whereas IPv6 supports a vastly larger address space,
virtually unlimited.

➢ Configuration
IPv6 supports auto-configuration; IPv4 often requires manual configuration or DHCP.

➢ Security
IPv6 has built-in IPSec support, whereas IPv4 requires additional configuration.
4. Explain the concept of a VLAN and its advantages.
A VLAN (Virtual Local Area Network) allows network administrators to segment a physical network into
multiple logical networks.

Advantages include:
➢ Improved security by isolating sensitive data.
➢ Enhanced performance by reducing broadcast traffic.
➢ Simplified network management by logically grouping users.

5. What are the differences between TCP and UDP?

➢ TCP (Transmission Control Protocol)
Connection-oriented, reliable, ensures data integrity with error-checking and acknowledgment (e.g.,
HTTP, FTP).

➢ UDP (User Datagram Protocol)

Connectionless, faster, but does not guarantee delivery, order, or error correction (e.g., video streaming,
online gaming).

6. Define Network Address Translation (NAT) and its types.

NAT translates private IP addresses to a public IP address for internet access.

Types include:
➢ Static NAT
One-to-one mapping between local and global addresses.

➢ Dynamic NAT
Maps a private IP address to a public IP from a pool of public addresses.

➢ PAT (Port Address Translation)

Maps multiple private IP addresses to a single public IP address by using different ports.

7. How does a DHCP server assign IP addresses, and what are its benefits?
A DHCP (Dynamic Host Configuration Protocol) server automatically assigns IP addresses to devices on a
network from a predefined range (scope).

Benefits include:
➢ Simplified IP address management.
➢ Reduction in IP address conflicts.
➢ Efficient handling of IP address changes and reassignments.

8. What is a Broadcast Domain, and how can it be segmented?

A broadcast domain is a network segment where a broadcast packet is forwarded to all devices. It can be
segmented using routers or VLANs to improve network performance and security by reducing unnecessary
broadcast traffic.

9. Explain the purpose and functionality of a router in a network.

 A router directs data packets between different networks, making decisions based on IP addresses. It
connects multiple networks, determines optimal paths, and helps manage traffic to ensure efficient data
delivery.

10. Describe the Spanning Tree Protocol (STP) and its importance.
STP (Spanning Tree Protocol) prevents loops in a network with multiple switches by creating a loop -free
logical topology. It detects and disables redundant paths, ensuring there is a single active path between any
two network devices.

11. What is the significance of the subnet mask in an IP address?

A subnet mask determines which portion of an IP address identifies the network and which part identifies
the host. It is essential for routing and IP address allocation, helping devices determine if an IP address is
within the same subnet or needs routing.

12. Explain the concept of CIDR and its advantages over traditional subnetting.
CIDR (Classless Inter-Domain Routing) allows more flexible IP address allocation by using variable-length
subnet masking (VLSM). It reduces wastage of IP addresses, enables efficient routing, and helps in
managing IP address exhaustion.

13. What are the main differences between Layer 2 and Layer 3 switches?
➢ Layer 2 Switch
Operates at the data link layer, forwards data based on MAC addresses, primarily used within a LAN.

➢ Layer 3 Switch
Operates at the network layer, can route data between different subnets using IP addresses, combining
features of switches and routers.

14. How does an ARP (Address Resolution Protocol) function in a network?

ARP translates IP addresses to MAC addresses, allowing devices to communicate over an Ethernet network.
When a device needs to find the MAC address of another device within the same subnet, it sends an ARP
request, and the device with the corresponding IP address replies with its MAC address.

15. Describe the process of IP address assignment and management in IPv6.

IPv6 addresses can be assigned through:
➢ Stateless Address Autoconfiguration (SLAAC)
Devices generate their own addresses using a combination of local information and router
advertisements.

➢ DHCPv6
Similar to DHCP in IPv4, assigns IP addresses and other configuration settings.

➢ Manual Configuration
Addresses are manually assigned by network administrators.

16. What is a default gateway, and why is it important?

A default gateway is a network device (typically a router) that routes traffic from a local network to other
networks, often the internet. It is crucial for enabling devices within a local network to communicate with
devices outside their subnet.
17. Explain the concept of a broadcast storm and its potential impact on a network.
A broadcast storm occurs when there is an excessive amount of broadcast traffic on a network,
overwhelming network devices and causing a significant degradation in network performance. It can result
from network loops, misconfigured devices, or malicious attacks.

18. What is MPLS (Multiprotocol Label Switching), and what are its benefits?
MPLS is a technique for directing data through a network based on short path labels rather than long
network addresses.

Benefits include:
➢ Improved speed, scalability, performance.
➢ Efficient management of network traffic for different types of services.

19. How does a Virtual Private Network (VPN) work, and what are its advantages?
A VPN creates a secure, encrypted connection over a less secure network, such as the internet. It allows
remote users to securely access a private network. Advantages include enhanced security, remote access,
and the ability to bypass geographic restrictions.

20. What are the benefits and challenges of implementing IPv6 in an existing IPv4 network?
➢ Benefits
❖ Larger address space.
❖ Improved routing efficiency.
❖ Enhanced security features.
❖ Simplified network configuration and management.

➢ Challenges
❖ Compatibility with existing IPv4 infrastructure.
❖ Transitioning and coexistence strategies.
❖ Training and reconfiguration for network administrators.
❖ Upgrading or replacing hardware and software to support IPv6.
1. Provide the definition for information security.
Information security refers to the practice of protecting information from unauthorized access, use,
disclosure, disruption, modification, or destruction to ensure its confidentiality, integrity, and availability.
2. What are the objectives of Information Security?
The objectives of information security, often referred to as the CIA triad, are:
➢ Confidentiality
Ensuring that information is accessible only to those authorized to have access.

➢ Integrity
Ensuring the accuracy and completeness of information and processing methods.

➢ Availability
Ensuring that authorized users have access to information and associated assets when required.

3. Explain the CIA triad and its importance.

➢ Confidentiality
Prevents unauthorized disclosure of information. It's important to protect sensitive data from
unauthorized access to maintain privacy and competitive advantage.

➢ Integrity
Protects information from being altered by unauthorized individuals. Ensuring data integrity means data
remains accurate and trustworthy throughout its lifecycle.

➢ Availability
Ensures that information and resources are available to authorized users when needed. It prevents
disruptions to productivity and operations by protecting against attacks like Denial-of-Service (DoS).

4. List five (5) threats to Information Security.

a. Malware (viruses, worms, Trojan horses)
b. Phishing attacks
c. Insider threats
d. Ransomware
e. Denial-of-Service (DoS) attacks

5. What are vulnerabilities in relation to information security?

Vulnerabilities are weaknesses or flaws in a system, network, or process that can be exploited by threats to
gain unauthorized access to or perform unauthorized actions on a system. They can arise from software
bugs, misconfigurations, or inadequate security policies.

6. What is Risk Management?

Risk Management is the process of identifying, assessing, and controlling threats to an organization's capital
and earnings. These threats could stem from a wide variety of sources, including financial uncertainties,
legal liabilities, strategic management errors, accidents, and natural disasters.
7. What is Access Control?
Access Control refers to the selective restriction of access to a place or resource. It determines who is
allowed to enter or use resources in a computing environment.

8. Explain two examples/models of Access Control.

a. Discretionary Access Control (DAC)
In this model, the owner of the resource specifies which users are allowed to access the resource. It is
flexible but can lead to security risks if not managed properly.

b. Role-Based Access Control (RBAC)

Access decisions are based on the roles assigned to users within an organization. Roles determine the
permissions a user has, making it easier to manage access rights across many users.

9. Explain two best practices for access control.

a. Principle of Least Privilege (PoLP)
Users should only be granted the minimum level of access necessary to perform their job functions.

b. Regular Access Reviews

Periodically review and update access permissions to ensure they are appropriate and remove access for
users who no longer need it.

10. The methods to implement access control are divided into two broad categories: list them.
a. Physical Access Control Limits access to physical spaces (e.g., buildings, rooms).
b. Logical Access Control Limits access to computer networks, systems, and data.

11. What is cryptography?

Cryptography is the practice and study of techniques for securing communication and data in the presence of
adversaries. It involves creating and analyzing protocols to prevent third parties from reading private
messages.

12. Explain Encryption, Decryption, Plaintext, and Ciphertext.

a. Encryption
The process of converting plaintext into ciphertext using a cryptographic algorithm and a key.

b. Decryption
The process of converting ciphertext back into plaintext using a cryptographic algorithm and a key.

c. Plaintext
The original readable message or data that is fed into the encryption algorithm.

d. Ciphertext
The encrypted message that is unreadable without the appropriate decryption key.

13. What is the difference between Symmetric-key and Asymmetric-key encryption?

➢ Symmetric-key Encryption
Uses the same key for both encryption and decryption. Examples include AES and DES.
 ➢ Asymmetric-key Encryption
Uses a pair of keys, one for encryption (public key) and one for decryption (private key). Examples
include RSA and ECC.

14. List two methods under Symmetric-key and two methods under Asymmetric-key encryption.
➢ Symmetric-key Methods
❖ Advanced Encryption Standard (AES)
❖ Data Encryption Standard (DES)
➢ Asymmetric-key Methods
❖ Rivest-Shamir-Adleman (RSA)
❖ Elliptic Curve Cryptography (ECC)

15. Explain the public key encryption method.

Public key encryption involves using a pair of keys - a public key, which can be shared with everyone, and a
private key, which is kept secret. Data encrypted with the public key can only be decrypted by the
corresponding private key, ensuring secure communication even over un trusted networks.

16. What is authentication?

Authentication is the process of verifying the identity of a user or system. It ensures that the entity
requesting access is who it claims to be.

17. Explain two-factor authentication.

Two-factor authentication (2FA) adds an additional layer of security by requiring two different types of
evidence to verify a user's identity.

This usually involves:

a. Something the user knows (e.g., password)
b. Something the user has (e.g., a mobile device to receive a verification code)

18. Provide the difference between encryption and authentication.

Encryption Ensures data confidentiality by converting it into an unreadable format.
Authentication Verifies the identity of a user or system.

19. List three methods for proving authentication.

a. Passwords
b. Biometric scans (e.g., fingerprints, facial recognition)
c. Security tokens or smart cards

20. What is a man-in-the-middle attack?

A man-in-the-middle attackoccurs when an attacker intercepts and potentially alters the communication
between two parties without their knowledge. This allows the attacker to eavesdrop or manipulate the data
being exchanged.

21. Write down the Diffie-Hellman key exchange protocol/algorithm.

The Diffie-Hellman key exchange is a method for two parties to securely share a common secret key over an
insecure communication channel.
 The protocol involves the following steps:
a. Both parties agree on a large prime number ( p ) and a base ( g ).
b. Each party selects a private key: ( a ) for Alice and ( b ) for Bob.
c. Alice computes ( A = g^a mod p ) and sends ( A ) to Bob.
d. Bob computes ( B = g^b mod p ) and sends ( B ) to Alice.
e. Alice computes the shared secret key as ( s = B^a mod p ).
f. Bob computes the shared secret key as ( s = A^b mod p ).
Both parties now share the same secret key ( s ), which can be used for secure communication.

22. What are digital signatures?

Digital signatures are cryptographic techniques used to verify the authenticity and integrity of a message,
document, or digital file. They provide proof that the content has not been altered and confirm the identity of
the sender.

23. Provide an example for using digital signatures.

An example of using digital signatures is signing an email. The sender uses their private key to generate a
signature for the email, which can then be verified by the recipient using the sender's public key to ensure
the email was indeed sent by the claimed sender and that it has not been altered.

24. What is network security?

Network security involves protecting the integrity, confidentiality, and availability of data and resources as
they are transmitted over or accessed via a network. It includes measures to prevent unauthorized access,
misuse, malfunction, modification, destruction, or improper disclosure.

25. What is a firewall?

A firewall is a network security device or software that monitors and controls incoming and outgoing
network traffic based on predetermined security rules. It establishes a barrier between a trusted internal
network and untrusted external networks, such as the internet.

26. What are intrusion detection methods used for?

Intrusion detection methods are used to detect unauthorized access or abnormal activities within a network
or system. They help in identifying and responding to potential security breaches.

27. Explain any two: Denial of Service, Packet sniffing, spoofing.

➢ Denial of Service (DoS)
An attack that aims to make a network or service unavailable to its intended users by overwhelming it
with a flood of illegitimate requests.

➢ Packet Sniffing
The process of intercepting and analyzing packets of data as they are transmitted over a network. This
can be used legitimately for network management or maliciously to capture sensitive information.

28. List four examples of a computer virus.

a. Melissa Virus
b. ILOVEYOU Virus
c. Mydoom
d. Stuxnet
29. Explain the concept of privacy.
Privacy refers to the right of individuals or organizations to control the collection, storage, and sharing of
their personal information. It involves ensuring that personal data is protected and not disclosed without
consent.

30. What is copyright protection?

Copyright protection is a legal framework that grants the creators of original works exclusive rights to their
use and distribution, typically for a limited time, with the aim of allowing the creators to receive recognition
and

31. List four items that copyright protects.

a. Literary Works: Books, articles, poems, and other written content.
b. Musical Works: Songs, musical compositions, and accompanying lyrics.
c. Artistic Works: Paintings, drawings, sculptures, photographs, and other visual arts.
d. Software: Computer programs, applications, and code.

32. List three software to detect plagiarism.

a. Turnitin
b. Grammarly
c. Copyscape