1. Internet of Things (IoT) is the network of physical objects or things embedded with electronics, sensors, and network connectivity, which enables these objects to collect and exchange data. IoT allows objects to be sensed and controlled remotely across existing network infrastructure, creating opportunities for more direct integration between the physical world and computer-based systems. However, man-in-the-middle attacks, replay attacks, tampering attacks, and denial of service attacks still occur. [Based on articles on ISACA website 2021]

1. The Internet of Things (IoT) enables ordinary users to be able to connect household devices to the Internet. Discuss how you think man-in-the-middle attacks, replay attacks, impersonation attacks, and tampering attacks will impact the security of communication between IoT devices. (10 marks)

2. Propose secure and resilient solutions that are capable of mitigating any three of the attacks presented in 3a above. (15 marks)

3. Explain how a man-in-the-middle attack might achieve impersonation when Sue sends a plaintext message to Joe asking for his public key so she can send encrypted communications to him. (10 marks)

4. One of the ways of preventing a man-in-the-middle attack is to use a digital certificate. Explain what is a digital certificate and how it might have helped in scenario above in 3c if Sue had asked for one from Joe. (15 marks)