SDS L10-L11 IDS, Incident Management, Software Engineering for Trustworthy Software

Question 1

What is the primary purpose of an Intrusion Detection System?

Accepted Answer

Find and report suspicious system and network activity

Question 2

What is a unidirectional identifier?

Accepted Answer

A private identifier valid in a specific context

Question 3

The WebID URI

Accepted Answer

Is a URL that resolves into a WebID Profile, Serves as unique identifier, Is contained in the SAN

Question 4

How to adress "Human Integration" (Law 6)?

Accepted Answer

Through "ceremonies"/rituals, Ensuring predictability through consistency in presentation and interaction

Question 5

CVEs

Accepted Answer

Are shared publicly, Describe known vulnerabilities, Follow a specific naming scheme

Question 6

In an identity metasystem, which are the three main roles?

Accepted Answer

Identity Provider, Relying Party, Digital Subject

Question 7

What defines a digital identity in security contexts?

Accepted Answer

A set of claims made by a digital subject about attributes

Question 8

Which statements apply to anomaly-based detection?

Accepted Answer

Treats intrusion detection as a classification problem, Builds profiles of normal behavior and flags deviations

Question 9

In WAM, a security realm

Accepted Answer

Represents a set of entities trusting authentication of the same IdP, Can contain services, application or process unit

Question 10

Which tasks are typical for a CERT or CSIRT?

Accepted Answer

Managing vulnerability reports and advisories, Handling security incidents reactively

Question 11

What is the primary role of a honeypot in security?

Accepted Answer

Acting as a decoy to monitor attack methods

Question 12

A WebID Profile

Accepted Answer

consists of RDF triples, represents identity claims, contains a public key

Question 13

Storing birthdates for a market analysis of buyers. Which identity law is violated?

Accepted Answer

"Minimal Disclosure for a Constrained Use"? (Law 2)

Question 14

Which statements are true for trust in cybersecurity?

Accepted Answer

Trust is rarely transitive and not symmetric, Trust is related to risk and evidence

Question 15

Which statements apply to signature-based IDS?

Accepted Answer

Is a reactive security measure, Detects known attack patterns, Requires frequent signature updates

Questions 15