Consider the case below: You get a notification from the mail server of your organization alerting you that your password has been changed and that you must confirm it. To your knowledge, however, you have not updated your password! There are a variety of potential causes for the password change. Was it a virus, and if so, on which systems, that provided an attacker with the necessary information to reset the password?

Consider the case below: You get a notification from the mail server of your organization alerting you that your password has been changed and that you must confirm it. To your knowledge, however, you have not updated your password! There are a variety of potential causes for the password change. Was it a virus, and if so, on which systems, that provided an attacker with the necessary information to reset the password?

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

Consider this scenario: Your company's mail server notifies you that your password has been changed and that you must confirm the change. You haven't changed the password, right? What prompted the password change and how did it occur? Was there a virus, and if so, whose computers, that allowed an attacker to successfully reset the password?
Consider the following scenario: you receive an email from your company's mail server alerting you that your password has been changed and that you must take action to confirm this. However, as far as you are aware, you have not changed the password. What gives? Why was the password changed, and what could have caused it to be changed? How did an attacker obtain the information they required to successfully reset the password? Was it a virus, and on what systems did it infect?
Here, a fictitious situation's authentication administration is described. Make a list of the different authentication techniques you have used. What are your thoughts on passwords as a security precaution in the near future?
Consider the following scenario: you get a message from your company's mail server informing you that the password for your account has been changed and that you must confirm the change. According to what you know, you have not altered the password! What may have motivated the password change, and how did it happen? Was it a virus, and if so, on which computers, that may have given an attacker with the information they needed to successfully reset the password?
Imagine this: Your company's mail server sends you an email warning you that your password been changed. You haven't updated the password, however. Why? What changed the password? How did an attacker reset the password? What systems did the virus infect?
Your company's mail server appears to have sent you a letter claiming that your password has been changed and requesting that you take action to confirm this. Even so, you're not aware of any changes to the password! It's possible something happened to cause the password to be changed. The information an attacker needed to effectively alter the password was delivered by what kind of malware and on which computer systems?
Assume that your company's mail server has given you a message informing you that your password has been changed and that you must confirm this. To your knowledge, you have not changed the password in any way. Why might the password have been changed in the first place? Whose systems may have been compromised with malware that might have made the password reset information available to an attacker?
There are a number of vulnerabilities in the password-based authentication procedure that might be used by attackers. It's possible that there's a universal solution to minimising the damage caused by each of these vulnerabilities.
Imagine if the mail server at your employer sent you a message informing you that your password had been changed and that you needed to confirm it. However, you haven't changed the password in quite some time. What caused the password to be changed? What kind of malware and on what systems may an attacker have gotten the information needed to change the password?
Let's pretend your company's mail server sends you a notification asking you to verify a password change. However, you haven't changed the password recently. What happened that necessitated a new code? To what malware and on what machines may an attacker have gained access to reset the password?
Assume you get an email from your company's mail server informing you that your account password has been changed and that you must confirm this. But you haven't changed the password, have you? Why was the password changed? An attacker may have successfully changed the password by using malware on which computers.
Imagine the following: You get an email from the mail server of your firm informing you that the password you use has been updated. However, you haven't changed the password in quite some time. Why? What caused the password to be changed? How was it that the password was reset by the attacker? Which kinds of computers did the virus attack?