Information Security — DU B.Sc. (Hons) Computer Science Previous Year Question Papers

Max\imum Marks : 90 4. Part of a question must be answered t6gether. 1 (a) Consider the following code fragme.nt: #include <stdio.h> #include <string.h> (2) int main() I char buffer[10] ; printf("Enter a string: "); gets (buffer) ; printf("You entered: %s\n", buffe.r) ; return 0; Can a buffer overflow occur in this program? Give suitable explanation. a) Define popular password attack and specific account attack. Suggest suitable countermeasures to prevent each. (c) Explain in band SQL injection attack. Also, discuss its types. (d) List the characteristics used by firewalls to enforce a security access control policy. {e) Explain the different phases of a computer vius. (I) What does disruption mean in the context of system security. Mention the types of threat actions that can cause disruption? (g) List any four major security concerns for mobile devices. (4) a) Define a digital envelope. Describe the process of creating a digital envelope. 2 (a) Compare and contrast Discretionary ACcess Control a)AC) and Role-Based Access Control caBAC). Describe the various RBAC reference models. (b) Explain public'Key Infrastructure x.509 (PKIX) model. 3 (a) Differentiate between the following: (i) Fixed database role and Fixed server roles (ii) User mode rootkit and Kernel mode rootkit (iii) SYN spoofmg attack and SYN flooding attack (iv) Public cloud and Private cloud (v) Low interaction honeypot and High interaction honeypot (b) Discuss any five fundamental security design principles. 4 (a) Describe various types of network scanning strategies that a worm uses to locate vulnerable host. Also, discuss any two major computer worms from history. (b) Discuss the key principles of whting a safe program code. Explain how input validation, type safety, and memory management practices prevent common software vulnerabilities. Illustrate with a example code. 5 (a) Describe any four cloud-specific security threats. Also, for each threat give its suitable countemlea§ures. a) Define injection attack. Also, discuss its major variants vvTh the help of suitable examples. 6 (a) Describe the main components of Identity, Credential, and Access Management (ICAro. (8) a) 7 (a) Explain one way hasb function. List the requirements for a secure hash function. Differentiate between frewall and honeypot in network security. Also, discuss the various types of firewalls. a) List the main components of a wireless network. Why is wireless security considered a major concern compared to wired security?