Part I: a) Distinguish between what firewalls look at and what antivirus programs look at.

b) Are AV programs used to detect more than viruses? Explain.

c) Distinguish between signature detection and behavioral pattern detection.

d) Why is signature detection not enough?

Part II: Suppose that an attack would do $100,000 in damage and has a 15% annual probability of success. Spending $9,000 per year on Measure A would cut the annual probability of success by 75%. Do a risk analysis comparing benefits and costs. Show your work clearly. b) Should the company spend the money? Explain. c) Do another risk analysis if Measure A costs $20,000 per year. Again, show your work. d) Should the company spend the money? Explain in detail.