Relevant Readings

• IDS slides and reading.
• Network threats slides and reading.

Short Essay Questions

Maximum of one page. Presentation (spelling, grammar and other aspects of writing) as well as correctness are considered when marking.

1. Write up descriptions of four examples of different denial-of-service attacks based upon amplification techniques at the network and application layer. For each example, explain the vulnerability being exploited, the type of amplification that results and possible mitigations for the attack. Make sure you include at least one example of both impact and traffic amplification.

2. Consider misuse (also known as signature-detection) and anomaly-detection network intrusion detection systems. In particular, discuss how these compare in terms of false positive rates, what effect does the stability of the environment into which they are deployed have upon their accuracy, how these compare in terms of performance as time goes on and how they compare in terms of allowing the type of attack to be determined.