Data protection

Instructions:

• Cite sources, where applicable.

1. What is the difference between the authentication problem and the identification problem in data protection?

2. After infecting a system, some viruses take steps to cleanse the system of any other malware. That is, they remove any malware that has previously infected the system, apply security patches, update signature files, etc. Why would it be in a virus writer’s interest to protect a system from other malware?

3. What are QR codes? How are security features implemented in QR codes? Provide your responses in 100-words or more.

4. Chapter 13 in your book talks about TLS. This problem is about the use of certificates in TLS.

Read the narrative on page 238 in your book about certificates and certificate authorities (CAs).

1. On your favorite browser, visit the University of Dallas’s home page. Find the certificate for this page on your browser. (You might have to do some research to find out how to access the certificate). Provide a screenshot of the certificate details. (10 points)

1. Although security experts and cryptographers often claim that the whole certificate system is broken by design, it is one of the best solutions we have along with trust – on – first – use (TOFU) policy. Explain what TOFU means.

5. Chapter 13 further talks about how TLS can fail (pages 247-248). Summarize these failures AND provide a solution to each failure.

6. Blockchain has been proposed as a solution for many applications. One such application is electronic notaries. Acronis is a provider of blockchain-based notary solutions. Read their work here https://www.acronis.com/en–us/articles/data–protection/and summarize how data is protected using blockchain-notaries.
7. Read the following article on quantum supremacy and how top tech companies are vying to claim it. In your own words, explain what quantum supremacy means for data protection. https://www.sciencenews.org/article/google–quantum–supremacy–claim–controversy–topscience–stories–2019–yir