1. If you were a malware designer, would you rather use TCP or UDP to distribute a malicious payload and why?
2. Give an example of an Internet worm. What vulnerability does the worm you cited exploit? What were the attack effects of the worm you cited, if any? What is a practical defense against the worm you cited?
3. What is the TCP triple-handshake and how can it be used in an attack? Which leg of the CIA triad would this attack fall under?