Which of the following events demonstrates an example of information leakage vulnerability? a. An attacker was able to bypass the login mechanism via a password guessing attack. b. An attacker could access sensitive data belonging to the HR department of his/her workplace. c. An attacker was able to retrieve arbitrary data from the database using crafted input. d. An attacker was able to get sensitive information about the target system from an error message.

Write a report on your study on user authentication as a method of access control.

The tripwire program is an example of a host-based intrusion detection system. This tool examines files and folders on the system and notifies the administrator of any changes. It employs a protected database of cryptographic checksums for each file reviewed and compares them as they are scanned. It must be set with a list of files and directories to check and changes allowed. It can allow adding new entries to log files but not changing old ones. What are the benefits and drawbacks of employing such a tool? Consider the issue of selecting which files should be checked and which should be reviewed rarely. Consider the time spent configuring the application and monitoring the results.

Consider how to handle passwords for the system you are designing, as well as the idea of strong passwords.

Consider how to handle passwords for the system you are designing, as well as the idea of strong passwords.