The US Transportation Security Administration (TSA) operates ten “checkpoints” for screening departing passengers at the Atlanta International Airport. Each checkpoint consists of a baggage conveyor belt, a CTX scanning/imaging machine, and a walk-through metal detector for passengers. However, not all ten checkpoints are necessarily operational all the time. This is because each checkpoint requires a team of three TSA employees to staff it, and there is not always a need to have ten checkpoints running simultaneously. Passengers arriving at the airport are first greeted by a “greeter” who directs each passenger to a specific checkpoint in operation. Once “greeted,” each passenger joins the single line at their assigned checkpoint for screening, and it takes an average of 2 minutes to process each passenger. The greeter’s job is to evenly divide arriving passengers between the checkpoints in operation, although the rate at which passengers arrive at the airport and approach the greeter varies with the time of day. Currently, the number of checkpoints that the TSA operates during the 8:00 a.m. to 4:00 p.m. time intervals of the day is described in the table below. (Do not round intermediate calculations. Round your answers to four decimal places.)                        Period                         Average Number of Passengers Arriving per Hour                 Number of Checkpoints        8:00 AM to 4:00 PM                                                    200                                                                             10                     What is the average time (minutes) a passenger spends in line waiting for service at each checkpoint?

Grand Forks Fish Market buys fresh Boston bluefish daily for $20.00 per pound and sells it for $30.00 per pound. At the end of each business day, any remaining bluefish is sold to a producer of cat food for $ 5 per pound. Daily demand can be a normal distribution with a mean of 2000 pounds and a standard deviation of 1000 pounds. Use the table below for Z-value.  What is the optimal stocking level?                                Service Level             Z-Value                                    0.3333                   – 0.432                                    0.4                          – 0.253                                    0.5                                 0                                    0.6667                     0.432                      

SYN cookies stop the SYN flooding attack.

Alice logs into an e-commerce site, abcshopping.com, that also provides a message feature. Post authentication, every user’s session is associated with an authenticated session ID. Bob sends Alice a message with a tag that says. What type of attack Bob is attempting on Alice? How can the website eliminate the threat from such attack vectors? [3+3pts]

Fuzzing-based bug detection tends to have less false positives, compared to static analysis–based detection.

In general, a blocklist-based approach is less secure than an allowlist-based approach because the list cannot be exhaustive

Control-flow hijacking attacks often corrupt control data such as return addresses and function pointers.

Web of trust relies on centralized CAs to manage certificates.

Jordan works as a red-team security analyst for a technology company that deploys large-scale AI-driven content-moderation services. These AI systems receive user-generated text, images, and videos, and automatically classify or filter harmful content. Jordan is concerned about whether the system is robust and safe, especially given the increasing number of adversarial inputs designed to bypass AI moderation. Jordan would like to conduct penetration testing by crafting adversarial prompts and manipulated inputs, similar to fuzz testing, that intentionally attempt to break or deceive the AI moderation algorithms. However, the AI service is currently deployed in production, actively moderating content for millions of users in real time. Jordan’s tests would be executed directly against the live system. (a) [6 pts] Discuss the ethical concerns that arise from performing this type of testing on a production AI moderation system with real users. Consider impacts on users, system integrity, privacy, service availability, and professional responsibilities.     (b) [6 pts] Discuss how Jordan could design or conduct the testing in an ethical and responsible manner while still achieving the security-testing goals. Provide concrete steps or safeguards (e.g., environment separation, permissions, data protections, audit procedures).

Because of their importance, voting machines are often written in safe languages and are well maintained.