Scribd
Upload
3 views3 pages

Computer System Security Overview Guide

The document is a practice set for a course on computer system security, covering various topics across five units. It includes very short, short, medium, and long answer questions on subjects such as system security, malware, control hijacking, confinement, sandboxing, web security, network security, firewalls, and intrusion detection systems. Each unit aims to assess knowledge and understanding of key concepts and mechanisms in computer security.

Uploaded by

aliceinitiate
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
3 views3 pages

Computer System Security Overview Guide

The document is a practice set for a course on computer system security, covering various topics across five units. It includes very short, short, medium, and long answer questions on subjects such as system security, malware, control hijacking, confinement, sandboxing, web security, network security, firewalls, and intrusion detection systems. Each unit aims to assess knowledge and understanding of key concepts and mechanisms in computer security.

Uploaded by

aliceinitiate
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

COMPUTER SYSTEM SECURITY –

PRACTICE SET
UNIT–I: INTRODUCTION TO COMPUTER SYSTEM
SECURITY
Very Short Answer
1. Define computer system security.
2. List the goals of system security.
3. What is the CIA triad?
4. Define threat and vulnerability.
5. What is risk in security context?

Short / Medium Answer


6. Explain the security services and mechanisms.
7. Explain security policy and security model.
8. Discuss different types of attacks on computer systems.

Long Answer
9. Explain system security architecture with neat diagram.
[Link] security goals and challenges in modern operating systems.

UNIT–II: PROGRAM SECURITY & MALWARE


Very Short Answer
[Link] is program security?
[Link] malware.
[Link] is a Trojan horse?
[Link] is a rootkit?
[Link] is spyware?

Short / Medium Answer


[Link] different types of malware.
[Link] virus life cycle.
[Link] Trojan horse attacks and prevention.

Long Answer
[Link] malware propagation techniques and detection methods.
[Link] malware defense mechanisms.

UNIT–III: SYSTEM SECURITY & CONTROL HIJACKING


Very Short Answer
[Link] is buffer overflow?
[Link] control hijacking.
[Link] is stack smashing?
[Link] is a race condition?
[Link] least privilege principle.

Short / Medium Answer


[Link] buffer overflow attacks with example.
[Link] stack smashing and its prevention techniques.
[Link] race condition vulnerabilities.

Long Answer
[Link] control hijacking attacks and countermeasures.
[Link] DEP, ASLR, and stack canaries in detail.

UNIT–IV: CONFINEMENT, SANDBOXING & WEB


SECURITY
Very Short Answer
[Link] is confinement?
[Link] is sandboxing?
[Link] is chroot jail?
[Link] session hijacking.
[Link] is clickjacking?
Short / Medium Answer
[Link] sandboxing techniques in operating systems.
[Link] chroot and its limitations.
[Link] session management in web applications.

Long Answer
[Link] web security threats: XSS, CSRF, and SQL injection.
[Link] web security models and browser security mechanisms.

UNIT–V: NETWORK SECURITY, FIREWALLS & IDS


Very Short Answer
[Link] is a firewall?
[Link] IDS and IPS.
[Link] is a DMZ?
[Link] is intrusion detection?
[Link] is packet filtering?

Short / Medium /long


[Link] different types of firewalls.
[Link] IDS architecture and detection methods.
[Link] DMZ architecture with diagram.

You might also like