Document information
- University
- Politecnico di Milano
- Degree programme
- Computer Engineering
- Subject
- Computer Security
- Academic year
- 2013-2014
- Classification
- Exam · Full exam
- Content
- Exam paper only
- Original format
- Text
- Searchable text
← Back
ExamFull examExam paper only
19 09 14
Full exam for Computer Security in the Computer Engineering degree programme at Politecnico di Milano. The document covers: Computer Security Exam September 19, 2014 First name: ________________________ Last name: ________________________ Matricola: ________________________ Signature: ________________________ Homeworks? [ ] (Y) [ ] (N) Instructions ● The exam is composed of 9 pages. ● Just as a cross
Computer SecurityFull exam
Document information
What's included in this study material
Full exam for Computer Security in the Computer Engineering degree programme at Politecnico di Milano. The document covers: Computer Security Exam September 19, 2014 First name: ________________________ Last name: ________________________ Matricola: ________________________ Signature: ________________________ Homeworks? [ ] (Y) [ ] (N) Instructions ● The exam is composed of 9 pages. ● Just as a cross
Import quality: text was extracted directly from the original document.
Extracted content from the document
Representative passages recognised in different parts of the material. The full extracted text remains available to search, while this compact preview makes the page easier to read.
Page 1
Computer Security Exam September 19, 2014 First name: ________________________ Last name: ________________________ Matricola: ________________________ Signature: ________________________ Homeworks? [ ] (Y) [ ] (N) Instructions ● The exam is composed of 9 pages. ● Just as a cross check, tell us whether you have completed the homeworks, by putting an "X" mark appropriately. ● The exam is "closed books". Please put away in a nonsuspicious place (i.e. not below the desk) any note, book, or similar. You will be expelled if, at any time, if you do not follow this rule. ● You are not allowed to communicate with other students, and you will be expelled from the exam if you do. ● Shut down and store electronic devices. They will be subject to inspection if found and you may be expelled if you are found using one. ● Please answer within the allowed space. Schemes are good, short answers are recommended. ● You can write in pen or pencil, any color, but avoid writing in red. ● No extra paper is allowed. ● The answers must be written exclusively in the space provided below the questions. PROPOSED SOLUTION 1 of 9 Question 1 (2 points) Consider the following web page, containing a simple form with an input field: <body> <form action="/handler.do" method="POST"> <input type="text" name="message" /> </form> </body> The POST requests are transmitted over HTTPS to the server, which handles them with the following script: string_t msg = request.post['message'] //read 'message' from request if msg is not empty: database.save(msg) //save message in database response.write("<p>Welcome! " + message + "</p>") 1 where the response.write function writes the formatted string in the HTTP response. A. Explain which is the vulnerability that you see and describe how it works. There is a reflected…
Preview
First page of the document.