This assignment is based on the iNTegrity case study presented in Appendix E of our textbook. (The case study starts on page 528.) For this case study, provide answers to Exercise questions #1 and #3 on page 531.You may find it useful to read Appendix E from the beginning. There is lots of good material there. That’s it. Just provide answers to 2 questions. Don’t worry about mitigations for the threats right now. The goal of this assignment is to get you to better understand how useful models can be to identify and mitigate threats. Attachment 1Attachment 2Attachment 3Attachment 4Appendix E I Case Studies as an answer key; but if you do, please dont feel limited to or constrained bythem. There are other example threats.) In contrast this section presents a modelwithout an answer key. Its a lightly edited version of a class exercise that wascreated by Michael Howard and used at Microsoft for years. It’s included withtheir kind permission. I’ve personally taught many classes using this model, andit is suf?ciently detailed for newcomers to threat modeling to ?nd many threats. Background This tool, named iNTegrity, is a simple ?le-integrity checking tool that readsresources, such as ?les in the ?lesystem, determining whether any ?les or reg- istry keys have been changed since the last check. This is performed by lookingat the following: I File or key names I File size or registry data I Last updated time and date I Data checksum (MDS and/or SHAI hash) Architecturally, the tool is split into two parts: a host component and anadministrative console. As shown in Figure E-4, one client can communicatewith multiple servers, rather than running the tool locally on each computer. iltrlTegrityr AdminConsole iNTegr’rtyr HostSoftware iNTegr’rty HostSoftware iNTegr’rty HostSoftware Figure E-4: The networked host/admin console nature ofthe iNTegrity tool In another operational environment, it might be known that a machine hasbeen compromised and can no longer be trusted, and the server and client soft-ware can be run off, say, a bootable CD or USB drive. In this case, the integrity- checking code is running under a trusted, read-only Windows environment, andthe host and admin components both read data from the compromised machine, 529
There are other example threats.) In contrast this section presents a model without an answer key. It’s a lightly edited version of a class exercise…
Give us your instructions.
Select the type of service you need: writing, calculations, or programming. We’ve created an intuitive order form that tells you what information to enter and where, so make sure to fill out each required field. Also, make your requirements as specific as possible. Don’t rush! Take your time and explain everything in detail how it works.
Proceed to checkout and enter your credit card details or PayPal login, how to pay. Follow the payment provider’s instructions to confirm the transaction.
Now your order is in our system! We’ll start processing it right away.
Place Your Order
Frequently asked questions
Is your service confidential?
When you place an order with our company, we ask you to provide us with such personal information as your name, phone number, and email address. We need this data to keep you updated on the important things related to your order or account.
Is there a possibility of plagiarism in my completed order?
We complete each paper from scratch and in order to make you feel safe regarding its authenticity, we check it for plagiarism before its delivery. To do that, we use our in-house software, which can find not only copy-pasted fragments but even paraphrased pieces of text. Unlike popular plagiarism detection systems that are used by most universities (e.g. Turnitin.com), we do not report to any public databases—therefore, such checking is safe.
We provide a plagiarism-free guarantee that ensures your paper is always checked for its uniqueness.
Is there a money-back guarantee? If yes, how can I receive a refund?
You can certainly get your money back in several cases. You can receive a full refund if you have paid for your order twice or if you have placed two identical orders. In case your paper was late or the quality of the paper does not correspond to your expectations, you will get compensation for these issues.
Do you keep a database of pre-written essays?
No, we do not have such a database. All papers you order from us are written from scratch. This means your paper is unique and has never been published before—neither will it be published after we deliver it to you.
When will my custom paper be done?
While placing an order with WritersHub, you can choose a period of time within which a paper should be delivered to you. The countdown until the specified deadline starts automatically from the moment we receive your payment in our system. For example, if you pay for your order at 6pm on Monday and choose a 3-day delivery option, you will receive your custom paper by 6pm on Thursday.
Remember that a writer needs a sufficient amount of time in order to conduct thorough research. Therefore, please choose the most suitable deadline when you place an order. Moreover, the later you need your paper to be delivered to you, the cheaper it will be. Thus, you will be able to save your money while your writer will have enough time to work on your order and ensure its quality.
Make sure you upload all the additional materials at the very beginning. If you fail to do that, the deadline for your order will be postponed as well.
I haven’t received my custom paper by the deadline. What should I do?
Let us know immediately about that. You can do it by writing a message on Facebook or email us. Our support manager will carefully examine your order and will assist you with it right away. The reasons for late delivery may vary from time to time. It can happen that you have entered a wrong email address or your spam filter does not allow you to receive emails from us. It is also possible that the writer is waiting for your reply and can not continue working without your assistance, or we are checking the work for plagiarism. Whatever the case may be, contact us if you have any problems with getting your order on time.