Advance Network and Infrastructure Security

[Document Title] 1
Advance Network and Infrastructure Security
TASK 1
1.
 Protocol – HTTP protocol does not encrypt all the communications and traffic between the
client and the server. The communication could be sniffed by an attacker to get plain login
credentials. Migrating to HTTPS would secure and encrypt all the communications between the
client and the server.
 Password – All the passwords for both the mobile and the internet bank online should be highly
encrypted using some form of a hashing algorithm.
2. The inputs are divided into blocks of data of fixed size. Each of the input is accepted by the hash
function as parameters. The hash function is then used to generate values from the blocks of data. The
values generated are the hashed text of data.
3. Required improvement. The current system could allow leakage of information through passwords
that are not hashed and unencrypted network traffic. The credentials for both the mobile and the web
are different. This is a poor management technique of storing data. The data needs to be normalized.
4. AES AND RSA.

[Document Title] 2

[Document Title] 3
FIG: RSA
FIG: AES
5.
 Brute force - a trial and error technique against a series of known hashes (Bernstein, 2005)
 Dictionary – use of a large set of word to check against the hashes.