中山大学-web安全08A答案.pdfVIP

中山大学软件学院 20 0 8 - 0 9 级软件工程专业(2011 学年秋季学期) 《We b S e c u rit y 》期末试题答案(A) Part 1. Explanation of Terms, 30 points NOTE: Give the definitions or explanations of the following terms, 5 points for each. (1) Data Integrity Integrity is violated when a message is actively modified in transit. Information security systems typically provide message integrity in addition to data confidentiality (2) Information Security Audit An information security audit is an audit on the level of information security in an organization (3) PKI PKI provides well-conceived infrastructures to deliver security services in an efficient and unified style. PKI is a long-term solution that can be used to provide a large spectrum of security protection. (4) X.509 The ITU-T recommendation X.509 defines a directory service that maintains a database of information about users for the provision of authentication services… (5) Denial-of-Service Attack DoS (Denial of Service) is an attempt by attackers to make a computer resource unavailable to its intended users. (6) SOA(Service-Oriented Architecture) is a set of principles and methodologies for designing and developing software in the form of interoperable services. These services are well-defined business functionalities that are built as software components (discrete pieces of code and/or data structures) that can be reused for different purposes. SOA design principles are used during the phases of systems development and integration Part 2. Brief Questions, 40 points NOTE: Answer the following HOW TO questions in brief, 8 points for each. (1) Asymmetric Cryptographic Method . (2) MD5: How to be used for password protection.