What is SSL and why is it not enough when it comes to encryption?
Answer / chaitanya
SSL is identity verification, not hard data encryption. It is designed to be able to prove that the person you are talking to on the other end is who they say they are. SSL and its big brother TLS are both used almost everyone online, but the problem is because of this it is a huge target and is mainly attacked via its implementation (The Heartbleed bug for example) and its known methodology. As a result, SSL can be stripped in certain circumstances, so additional protections for data-in-transit and data-at-rest are very good ideas.
| Is This Answer Correct ? | 0 Yes | 1 No |
What is the difference between an HIDS and a NIDS?
A phonetic password generator picks two segments randomly for each six-letter password. The form of each segment is CVC (consonant, vowel, consonant), where V= < a, e, i, o, u > and C = (V.) ̅ What is the total password population? What is the probability of an adversary guessing a password correctly?
On a Windows network, why is it easier to break into a local account than an AD account?
How would you permanently remove the threat of data falling into the wrong hands?
What is data source in computer?
What is meant by computer application?
What’s better, a red team or a blue team?
What is worse in Firewall Detection, a false negative or a false positive? And why?
1. Assume that passwords are selected from four-character combination of 26 alphabetic characters. Assume that an adversary is able to attempt passwords at a rate of one per second. a. Assuming no feedback to the adversary until each attempt has been completed, what is the expected time to recover the correct password? b. Assuming feedback to the adversary flagging an error as each incorrect character is entered, what is the expected time to discover the correct password?
Why are internal threats oftentimes more successful than external threats?
What’s the difference between a White Box test and a Black Box test?
What is the Three-way handshake? How can it be used to create a DOS attack?