Sequential Port Scan

Question 1

1. Suppose the transaction ID for DNS queries can take values from 1 to 65,536 and is randomly chosen for each DNS request. If an attacker sends 1,024 false replies per request, how many requests should he trigger to compromise the DNS cache of the victim with probability 99%?

2. Explain how a stateless firewall would block all incoming and outgoing HTTP requests.

3. Explain why deep packet inspection cannot be performed on protocols such as SSL and SSH.

4. Explain how it would give a potential intruder an additional advantage if he can spend a week stealthily watching the behaviors of the users on the computer he plans to attack.

5. The coupon collector problem characterizes the expected number of days that it takes to get n coupons if one receives one of these coupons at random every day in the mail. This number is approximately n ln n. Use this fact to compare the number of TCP connections that are initiated in a sequential port scan, going from port 1 to 65535, directed at some host, to the expected number that are requested in a random port scan, which requests a random port each time (uniformly and independently) until it has probed all of the ports.

6. Describe a modification to the random port scan, as described in the previous exercise, so that it still uses a randomly generated sequence of port numbers but will now have exactly the same number of attempted TCP connections as a sequential port scan.

Question 2

(1) Try to implement Stacks and Queues using arrays.

(2) Implement a linked-list with inserting 5 nodes. Print values (or contents) if you can.

Question 3

please read the book named (New Lexicon of Hate)

• How can you tell this book has a Zionist bias?

• Identify a hate group and determine what its strategies are? How does it perpetuate its agenda? Be prepared to share your research in class.

• Two pages maximum
• MLA format.