11 02 13

Page 1

Sign. Surname Name ID (matricola) Exam date: 11-02-2013 Version 1.0 Computer Security Prof. Stefano Zanero Punteggi: Question Max Points 1 6 2 6 3 4 4 10 5 3 6 6 Total: 35 Instructions • The exam is “closed books”. Please put away in a non-suspicious place (i.e. not below the desk) any note, book, or similar • Shut down and store electronic devices. They will be subject to inspection if found. • Please answer within the allowed space. Schemes are good, short answers are rec- ommended. • You can write in pen or pencil, any color, but avoid writing in red. • If you are taking the 10-credit course joint with professor Serazzi’s EDI, please write “JOINT COURSE” in capitals on the front page • If you took the optional lab, please write “ADD LAB” in capitals on the front page • If you are graduating in July and need this grade, please write “GRADUATION” in capitals on the front page Question 1 (6 points) You are the information security manager for a large bookstore chain (think of Feltrinelli, or Borders). They are deploying a new enterprise information system, and needs to satisfy the following requirements: there is a web application for the customers, that allows them to search and buy books over the Inter- net. The application uses a remote payment processing system. In each bookstore, employees use a web application to handle sales, search books, order them if sold out, etc. Self-service kiosks can be used by customers to access the website from each shop. The employees need to be able to exchange emails with customers. Emails are also generated when a customer buys something for him/herself. Please draw a network scheme that indicates all of the servers and components needed for this infrastructure, the de- ployment of security devices such as firewalls, the rules…