Esame completo di Computer Security per il corso di Computer Engineering presso Politecnico di Milano. Materiale proveniente dall’archivio storico Studwiz e classificato per la consultazione online.
Esame completo di Computer Security per il corso di Computer Engineering presso Politecnico di Milano. Materiale proveniente dall’archivio storico Studwiz e classificato per la consultazione online.
Qualità dell’importazione: il testo è stato estratto direttamente dal documento originale.
Passaggi rappresentativi riconosciuti nelle diverse parti del materiale. Il testo completo resta presente nella pagina per la ricerca, mentre l’anteprima compatta rende più semplice la lettura.
Computer Security Exam September 19, 2014 First name: ________________________ Last name: ________________________ Matricola: ________________________ Signature: ________________________ Homeworks? [ ] (Y) [ ] (N) Instructions ● The exam is composed of 9 pages. ● Just as a cross check, tell us whether you have completed the homeworks, by putting an "X" mark appropriately. ● The exam is "closed books". Please put away in a nonsuspicious place (i.e. not below the desk) any note, book, or similar. You will be expelled if, at any time, if you do not follow this rule. ● You are not allowed to communicate with other students, and you will be expelled from the exam if you do. ● Shut down and store electronic devices. They will be subject to inspection if found and you may be expelled if you are found using one. ● Please answer within the allowed space. Schemes are good, short answers are recommended. ● You can write in pen or pencil, any color, but avoid writing in red. ● No extra paper is allowed. ● The answers must be written exclusively in the space provided below the questions. PROPOSED SOLUTION 1 of 9 Question 1 (2 points) Consider the following web page, containing a simple form with an input field: <body> <form action="/handler.do" method="POST"> <input type="text" name="message" /> </form> </body> The POST requests are transmitted over HTTPS to the server, which handles them with the following script: string_t msg = request.post['message'] //read 'message' from request if msg is not empty: database.save(msg) //save message in database response.write("<p>Welcome! " + message + "</p>") 1 where the response.write function writes the formatted string in the HTTP response. A. Explain which is the vulnerability that you see and describe how it works. There is a reflected…
Prima pagina del documento.
