JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD
JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD B.Tech IV INFORMATION SECURITY Previous Question Paper (July/August - 2022 - R18)
Answer any five questions. All questions carry equal marks.
Main
Draw a matrix that shows the relationship between security mechanisms and attacks.
Answer
| Security Mechanism / Attack | Passive Attacks | Active Attacks |
|---|---|---|
| Encipherment | High | Medium |
| Digital Signature | Low | High |
| Access Control | Low | High |
| Data Integrity | Low | High |
| Authentication Exchange | Low | High |
| Traffic Padding | High | Low |
| Routing Control | Medium | Medium |
| Notarization | Low | High |
The matrix illustrates that encipherment and traffic padding are primarily effective against passive attacks (e.g., traffic analysis, release of message contents), whereas mechanisms like digital signatures, access control, and data integrity are essential for mitigating active attacks (e.g., masquerade, replay, modification of messages, and denial of service).
List and explain the Strength of DES.
Answer
The strength of the Data Encryption Standard (DES) is determined by the following key factors:
- Key Size: DES uses a 56-bit key, providing 2 to the power of 56 possible keys, which is approximately 7.2 x 10 to the power of 16. While this was secure in the 1970s, it is now considered vulnerable to brute-force attacks due to advances in computing power.
- Algorithm Design: The algorithm relies on the Feistel structure, which involves 16 rounds of processing. Each round uses a combination of substitution (S-boxes) and permutation (P-boxes) to achieve confusion and diffusion, making the relationship between the plaintext and ciphertext highly complex.
- S-Box Design: The S-boxes are the core of DES security, providing non-linearity. They are specifically designed to resist differential cryptanalysis.
- Brute-Force Vulnerability: The primary weakness of DES is its short key length. Modern distributed computing and specialized hardware (like FPGAs) can exhaust the key space in a relatively short time, rendering single-DES insecure for sensitive data.
- Avalanche Effect: DES exhibits a strong avalanche effect, where a small change in the input (plaintext or key) results in a significant, unpredictable change in the output ciphertext, which is a critical requirement for a secure block cipher.
Why do some block cipher modes of operation only use encryption while others use both encryption and decryption? Also, state some differences between Block & Stream ciphers.
Answer
Sign in to view the complete answer paper.
With the help of a neat diagram, explain the model for Internetwork security.
Answer
Sign in to view the complete answer paper.
Consider a Diffie- Hellman key with a common prime q=11 and primitive root α = 2. If the user has a public key Ya = 9, what is A’s private key XA.
Answer
Sign in to view the complete answer paper.
Briefly explain the Public key Cryptography Principles in detail.
Answer
Sign in to view the complete answer paper.
Discuss about Message authentication and Hash Functions.
Answer
Sign in to view the complete answer paper.
List and explain the PGP services and explain how PGP message generation is done with a neat diagram.
Answer
Sign in to view the complete answer paper.
Mention three variations of digital signatures and briefly state the purpose of each.
Answer
Sign in to view the complete answer paper.
Explain the X.509V3 certificate format.
Answer
Sign in to view the complete answer paper.
In PGP, what is the probability that a user with N public keys will have at least one duplicate key ID?
Answer
Sign in to view the complete answer paper.
Discuss the steps involved in Secure Electronic Transaction.
Answer
Sign in to view the complete answer paper.
Draw and explain the IP security architecture.
Answer
Sign in to view the complete answer paper.
Select any antivirus of your choice and explain it in detail.
Answer
Sign in to view the complete answer paper.
Where would you place a web server in an organization assuming that you can use a network firewall and why?
Answer
Sign in to view the complete answer paper.