Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

*Please number answers and answer all parts of the question thoroughly and compl

ID: 638997 • Letter: #

Question

*Please number answers and answer all parts of the question thoroughly and completely*

1.Consider an automated tell machine (ATM) in which users provide a personal identification number (PIN) and card for account access. Given examples of confidentiality, integrity, and availability requirements associated with the system and, in each case indicate the degree of importance of the requirements.

2. Repeat the problem 1 for a telephone switching system that routes calls through a switching network based on the telephone number requested by the caller.

3. Consider a desktop publishing system used to produce documents for various organizations.

Give an example of a type of publication in which confidentiality of the stored data is the important requirement.

Give an example of a type of publication in which data integrity is the most important requirement.

Give an example in which system availability is the most important requirement.

Explanation / Answer

Problem

Solution

  
the communication channel between the ATM and the bank must be encrypted

      the PIN must be encrypted (wherever it is stored)

  
Integrity requirements:

  
the actions performed via the ATM must be associated to the account associated with the card

  
Availability requirements:

the system must be able to serve at least X concurrent users at any given time

the system must be available 99.9% of the time