Q1
Incomplete mediation is another vulnerability that has existed for decade. This vulnerability occurs when the developers of a system use values in the definition of the program such that adversaries can change the values to wrong values, or users enter the values incorrectly leading to a massive failure of the entire system. NASA’s mars orbiter crashed into mars because the engineers failed to convert English to metric measurements during the exchange of vital data. The navigation team used meters and millimeters while astronautics responsible for the design of the spacecraft used inches, feets and pounds. This is a special example of an incomplete mediation.
Q2
In the realization of the challenges and problems resulting from incomplete mediation, complete mediation …show more content…
Though every software development team seeks to develop a fully secure team, each and every security mechanism has its own advantages and disadvantages. Penetrate and patch approach technique enables the organization in consideration to progressively find vulnerabilities in the system and patch them appropriately. This is particularly essential as attacks are innovations from adversaries thus requiring continued update.
Q7
Small, single purpose modules are easy to assess and implement security measures since only a single module needs to be secured and there is no communication channels involved. However, complex modules are difficult to completely assess due to the large number of modules and the many communication channels involved.
Q8
Every time a module is invoked, a system overhead is accrued. This happens even in consideration to security systems. However, smaller modules are easier to assess and evaluate for security than large complex modules. As such, there exists a tradeoff between security and performance of a system. However, the security of a system is more important as considered to its performance.