Windows of Vulnerability assignment
1. Print the Case Study document.
2. Read the Case Study.
3. Answer the questions in the following manner:
a. Find the paragraph in the case study that relates to the question.
b. In the margin of the document next to the subject paragraph, print a brief statement in your own handwriting on your copy of the case study explaining what you found.
c. Using your phone, take a picture of the paragraph including your printed comment.
d. Paste the photograph into this Word answer document.
e. Underneath the photograph, type a longer, more thorough explanation of what you found.
f. Place each answer on a separate page.
4. YOU MAY NOT QUOTE FROM THE CASE STUDY DOCUMENT. DO NOT USE CITATIONS.
5. YOU MUST USE YOUR OWN WORDS TO ANSWER EACH QUESTION.
Windows of Vulnerability Case Study Questions
Write your responses in NON-BOLD text.
Q1. What distinct states does a vulnerability transition through?
Q2. Study Figure 1, then comment on why a person would expect this graph regarding Discovery, Disclosure, and Patch Released.
Q3. What purposes does Bugtraq serve?
Q4. What is Phf and how did attackers gain access to the root user level in the Phf incident?
Q5. a. What is IMAP?
b. What are the two attack types that caused a buffer overflow in IMAP?
Q6. a. What is the purpose of BIND?
b. How was a buffer overflow created in BIND?
Q7. Compare Figure 4 - IMAP histogram and Figure 5 - BIND histogram. Why are there such great differences in the two graphs?
Q8. Explain the two positions titled "The Great Debate."
Q9. Patches for the three vulnerabilities in this case study were available. Comment on why attacks still happened. Also, discuss "active management."
Q10. What are the benefits of independent auditing in regard to active systems management?
Article: Windows of Vulnerability: A Case Study Analysis by William A. Arbaugh, William L. Fithen and John McHugh.
Format your assignment according to the following formatting requirements:
1. The answer should be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides.
2. The response also includes a cover page containing the title of the assignment, the student's name, the course title, and the date. The cover page is not included in the required page length.
3. Also include a reference page. The Citations and references should follow APA format. The reference page is not included in the required page length.