3. [10 points] Suppose an IDS is 90% accurate, so that there is a 10% chance...

Transcribed Image Text:

3. [10 points] Suppose an IDS is 90% accurate, so that there is a 10% chance of false positives or false negatives. There are 500,000 log entries registered by the IDS, where 200 of these entries are actual malicious events. How many times will the alarm be sounded and how many are false negatives? 4. [10 points] Suppose Bregman is trying to establish a TCP connection with Altuve. When Bregman sends the ACK response to complete the 3-way handshake, the sequence number is 128614593 and the acknowledgement number is 846280196. What are the sequence numbers for the SYN request and SYN- ACK reply packets? 5. [10 points] Seager wants to perform a DNS cache poisoning attack, where DNS IDs are 24 bits long. Based on the birthday paradox analysis, how many DNS requests and equal number of fake responses would he need to make in order to get a 40% chance of succeeding? 3. [10 points] Suppose an IDS is 90% accurate, so that there is a 10% chance of false positives or false negatives. There are 500,000 log entries registered by the IDS, where 200 of these entries are actual malicious events. How many times will the alarm be sounded and how many are false negatives? 4. [10 points] Suppose Bregman is trying to establish a TCP connection with Altuve. When Bregman sends the ACK response to complete the 3-way handshake, the sequence number is 128614593 and the acknowledgement number is 846280196. What are the sequence numbers for the SYN request and SYN- ACK reply packets? 5. [10 points] Seager wants to perform a DNS cache poisoning attack, where DNS IDs are 24 bits long. Based on the birthday paradox analysis, how many DNS requests and equal number of fake responses would he need to make in order to get a 40% chance of succeeding?

Answer rating: 100% (QA)

Question 3 Question 3 How many times will the alarm be sounded and how many are false negatives Given Total number of log entries 500000 Actual malici... View the full answer