QUESTION $3$

Escape Corporation is a multinational organisation that processes sensitive customer data and relies heavily on its network infrastructure for day$-$to$-$day operations. The company is planning to implement an Intrusion Detection System

$\frac{\text{C}\text{o}\text{s}7055}{2}\frac{?}{4}$

$($IDS$)$ to enhance its overall network security. Please answer the following questions regarding the implementation of the IDS in the context of Escape Corporation:

a$.$ Describe the key steps involved in the planning phase of implementing an IDS at Escape Corporation. What considerations should be taken into account when defining the scope, objectives, and requirements for the IDS implementation?

$[7$ Marks$]$

b$.$ Outline the steps involved in integrating the IDS with Escape Corporation's existing security infrastructure. How will the IDS collaborate with firewalls, antivirus solutions, and other security measures to create a comprehensive security posture?

$[6$ Marks$]$

c$.$ Explain the primary detection mechanisms employed by the IDS at Escape Corporation. How does the system identify potential security incidents or abnormal activities within the network? What role do signatures play in detecting known threats?

$[7$ Marks$]$

d$.$ Identify potential challenges Escape Corporation may face during the IDS implementation and operation. What mitigation strategies and best practices should be employed to address these challenges and ensure the sustained effectiveness of the IDS?

$[5$ Marks$]$

QUESTION $4$

a$.$ Briefly explain the concept of digital signatures.

$[5$ Marks$]$

b$.$ Alice wants to establish a secure communication channel with Bob by digitally signing her messages. Design a robust digital signature system tailored to their communication needs. Provide detailed insights into the key components, cryptographic algorithms, and security considerations.

i$.$ Identify and explain the key components required for the digital signature system. What entities $($e$.$g$.,$ public keys, private keys, certificates$)$ are essential for Alice and Bob to exchange secure messages?

$[5$ Marks$]$

ii$.$ Describe the process of key generation for both Alice and Bob. How are their public and private keys generated, and what measures should be in place for secure key management?

$[5$ Marks$]$

iii. Outline the steps involved in Alice generating a digital signature for her messages. Include details about the cryptographic operations and any additional data that may be included in the signature.

$[5$ Marks$]$

iv$.$ Explain how Bob verifies the digital signatures received from Alice. Highlight the cryptographic procedures involved in the verification process and how Bob ensures the integrity and authenticity of the messages.

$[5$ Marks$]$