EE 4215 Security Technology Chapter 1 Introduction Q1. 1999 – 2000 Sem B 5.b) [8 marks] 2004 – 2005 Sem B 3.b) [8 marks] To give access to authorized people are under four categories. What are they? Gives one example for each category. Answer: 1. What You Have • This means of authentication is based on your having a physical thing. • Example: A key, badge, token, or plastic card. 2. What You Know • Many systems verify authorized access based on what you know. • Example: A password, identification number, or the correct combination of numbers on locks. 3. What You Do • This mode of authorized access is based on something you do that is unique. • Example: Your signature. 4. What You Are • This security system uses biometrics—the science of measuring individual body characteristics. • Example: Fingerprints, retinal scans, and hand characteristics.

1

Chapter 2 Threats To Computer System Q2. 1998 – 1999 Sem B B-1.a) [9 marks] 2000 – 2001 Sem B 3.a) [9 marks] 2003 – 2004 Sem A 5.c) [9 marks] 2004 – 2005 Sem B 5.b) [9 marks] There are three different types of threats: namely disclosure threat, integrity threat and denial of service threat. Describe the characteristics of these threats and the importance of them with example in affecting the normal operations of some computer or organization activities. Answer: Disclosure threat • This threat involves the dissemination of information to an individual for whom that information should not be seen • This information may be in computer storage or in transit between computer systems • disclosure of information is called “leak” • important for confidential organization such as military, government etc. Integrity threat • This threat involves any unauthorized change to information stored on a computer system or in transit between computer systems • non-critical information has less consequence, but critical information can