Notes, summaries, assignments, exams, and problems for Computers

**CIA Triad: Core Security Principles**

The CIA Triad consists of Confidentiality, Integrity, and Availability. These are the fundamental goals of information security.

**Threat Modeling: Proactive Security**

Threat modeling involves system decomposition and emphasizes security by design.

**Kerckhoffs's Principle: System Security**

Kerckhoffs's Principle states that:

1. Security should not depend on the secrecy of the system's design, but only on the secrecy of the key.
2. The system should be usable.
3. Keys must be easy to change.

**One-Time Pad: Unbreakable Encryption**

A One-Time Pad is an algorithm that XORs the message with a randomly generated key of equal length. It is secure if:

1. The key is truly random.
2. The key is as long as the message.
3. Each key is used

Bit stuffing and destuffing are crucial techniques used in data link layer protocols to ensure reliable data transmission. They prevent sequences of data bits from being misinterpreted as control characters or flags, especially when the data itself contains patterns identical to these control sequences.

What is Bit Stuffing?

Bit stuffing is the process of adding one or more extra bits into a data stream to break up a sequence of identical bits that might otherwise be misinterpreted as a control signal. For example, in protocols like HDLC, a flag sequence (01111110) is used to mark the beginning and end of a frame. To prevent the actual data from containing this sequence, a '0' bit is stuffed after every five consecutive '1's in the data stream.... Continue reading "C Program for Bit Stuffing and Destuffing" »

Understanding Computer Networks

• A computer network is the interconnection of multiple devices, generally termed as hosts, connected using multiple paths for the purpose of receiving data or media.
• Connected devices share information and resources.
• The channel or line is where this information is transmitted.

Computer Network Classifications

Networks can be classified in several ways:

1. By Size: The most common classification.
2. By Property
3. By Connection Method
4. By Topology

1. Network Classification by Size

• LAN (Local Area Network): Maximum of a building. The most frequent type, common in most offices.
• MAN (Metropolitan Area Network): Maximum of a city, connecting different buildings.
• WAN (Wide Area Network): Connects devices from different cities or even countries.

Scene 1:

• Everyone shows up in a round table with computers thinking on what is the new game they will create.

• Poster: Brainstorm of ideas

• Carla: What game should we create now?

• Andrea: We can create a city!

• Bernardo: Yes! Let’s create a game that allows creating and simulating the life of your own avatar.

• Ines: That will be perfect! We can design clothes and accessories for the avatars

• Cuesta: That is a great idea, and it will not take too much time to code.

• Carla: We can also adapt the game so people can play using their smartphones.

• Everyone: Great let's call it... BIM’S!

Scene 2:

• Cuesta: You sit down in front of a computer and start typing codes. Let’s start with the coding

  • Question to Bernardo: Bernardo, do you remember the coding of how to make

Common Block Cipher Modes and Encryption

Double DES: This method uses two keys for encryption. It is susceptible to the meet-in-the-middle attack, where an attacker attempts to find a match such that E(k1, M) = D(k2, C).

ECB (Electronic Codebook): Each block is encoded with the same key. Information leakage can occur with repeated messages. While it is parallelizable, it is vulnerable to block replay attacks, where an attacker monitors and replays repeated messages.

CBC (Cipher Block Chaining): This mode uses a key and an Initialization Vector (IV). The IV ensures that the same plaintext produces different ciphers, which limits information leaks. However, patterns can still emerge in long messages, and the primary drawback is a lack of integrity.... Continue reading "OSI Model Security and Encryption Protocols" »

CIA Triad

The CIA Triad consists of Confidentiality, Integrity, and Availability. Related concepts include Authentication, Accountability, and Auditability.

Types of Harm

• Interception
• Interruption
• Modification
• Fabrication

Web Technologies

HTML

• GET: Embeds parameters into the URL.
• POST: Sends data directly to the server; more secure.

PHP

• PUT: Used to create or replace a file at the specified URL. Sends data like POST, more suitable for uploading files.

Penetration Testing

5 Steps to Penetration Testing:

1. Reconnaissance
2. Scanning
3. Gaining Access
4. Maintaining Access
5. Clearing Tracks

Security Controls

• Prevention: Outright stopping an attack.
• Deterrence: Making an attack harder.
• Deflection: Making a target less attractive.
• Mitigation: Lessening the harm.
• Detection: Identifying

Smith & Mosier Design Categories

The following categories represent the Smith & Mosier standards for interface design:

• Data Entry (199): User actions involving input of data to a computer and computer responses to such inputs.
• Data Display (298): Computer output of data to a user and assimilation of information from such outputs. Note: Data should be displayed in a usable form; do not force users to convert displayed data.
• Sequence Control (184): User actions and computer logic that initiate, interrupt, or terminate transactions.
• User Guidance (110): Error messages, alarms, prompts, labels, and formal instructional material to assist user interaction.
• Data Transmission (83): Computer-mediated communication among system users and other systems.

NETWORKING

1- Characteristics of Electronic Cables

Impedance, attenuation, and capacitance are crucial in electronic cables.

Impedance:

Resistance to electron movement in an AC circuit, measured in ohms (Ω).

Attenuation:

Resistance to electron flow, measured in db/m.

Capacitance:

Energy storage in a cable, measured in picofarads (pF).

2- Physical Description of Cables

Twisted Pair: Protects against crosstalk and noise.

Coaxial Cable: Consists of copper conductor, plastic insulation, and shielding.

Fiber-Optic Cable: Core, cladding, buffer, strengthening material, and outer jacket.

3- UTP vs. STP

Shielding reduces electrical noise in STP but makes installation complex.

4- Crimping RJ-45 UTP Cables

Creates straight-through and crossover cables for connecting... Continue reading "Understanding Networking: Cables, Protocols, and Topologies" »

Java Programming Fundamentals

This document provides a quick reference to fundamental Java programming concepts, including object-oriented programming basics, common data structures like ArrayLists, handling user input, string manipulation, type conversion, and file input/output operations.

Object-Oriented Programming: The Persona Class

Below is a basic definition of a Persona class, illustrating fields and a constructor. In a complete implementation, you would also include getter and setter methods for each field.

public class Persona {
    private String nombre;
    private int ojos;
    private int piernas; // Added for completeness based on constructor
    private int brazos; // Added for completeness based on constructor

    public Persona(