Security Evaluation Methodologies

Feb 4th, 2015
Steve1995
Category:
Computer Science
Price: $25 USD

Question description

Screen Shot 2015-02-03 at 1.55.21 AM.png1 Attack Tree 

Recently, there have been several cases of someone losing possession of their Twitter account in a

hacking attempt. Review the following two stories:

http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/

https://medium.com/p/24eb09e026dd

Develop an attack tree for stealing a Twitter handle that encompasses the basics of these attacks,

as well as other threat vectors you can think of. Your tree should include at least 25 nodes and be

comprehensive. For an explanation of attack trees, refer to the following article:

https://www.schneier.com/paper-attacktrees-ddj-ft.html

2 Evaluation Framework 

In this question you will develop your own evaluation framework (like the one from the lecture on

password alternatives) I ATTACHED . First choose a problem with a security aspect that has at least 4 competing

solutions (try to come up with your own topic, however a few suggestions are below). To compare

these solutions, come up with at least 3 security criteria and at least 3 non-security criteria (functionality,

usability, deployability) that would be desirable for the solution to hold (ideally, they will

conflict in such a way that no solutions will hold all of them). Determine a score for the evaluation

of each property. The example in Lecture 2 used three scores: the solution did not meet the criteria,

it almost held the property, and it fully held the property.

Explain each criteria, and exactly what must be true of the solution to get each possible score in your

ranking. Then evaluate each solution against each criteria, justifying your score. Summarize this in

a chart.

Refer to http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-817.pdf for a more involved security

evaluation.

in this question i need to do the frame work for  payment systems (, Paypal,)


Tutor Answer

(Top Tutor) Daniel C.
(997)
School: UT Austin
PREMIUM TUTOR

Studypool has helped 1,244,100 students

8 Reviews


Summary
Quality
Communication
On Time
Value
pmallory
Dec 11th, 2016
" Totally impressed with results!! :-) "
mixedballz
Dec 2nd, 2016
" excellent work as always thanks for the help "
Five Star Tutor
Nov 26th, 2016
" Outstanding Job!!!! "
kiln82
Nov 18th, 2016
" awesome work thanks "
darnay
Nov 9th, 2016
" The best tutor out there!!!! "
likeplum4
Nov 5th, 2016
" Excellent work as usual "
kpcutie
Oct 13th, 2016
" Excellent job "
Joemoe
Oct 4th, 2016
" <3 it, thanks for saving me time. "
Ask your homework questions. Receive quality answers!

Type your question here (or upload an image)

1819 tutors are online

Brown University





1271 Tutors

California Institute of Technology




2131 Tutors

Carnegie Mellon University




982 Tutors

Columbia University





1256 Tutors

Dartmouth University





2113 Tutors

Emory University





2279 Tutors

Harvard University





599 Tutors

Massachusetts Institute of Technology



2319 Tutors

New York University





1645 Tutors

Notre Dam University





1911 Tutors

Oklahoma University





2122 Tutors

Pennsylvania State University





932 Tutors

Princeton University





1211 Tutors

Stanford University





983 Tutors

University of California





1282 Tutors

Oxford University





123 Tutors

Yale University





2325 Tutors