SST UG2 Exam Revision The exam will be ● closed book ● 2 hours plus 5 minutes reading time ● 2 sections A and B each with 3 questions ● Answer 2 questions from each section Section A covers descriptive and qualitative security content and knowledge Section B covers the more technical and mathematical cryptography content.

Recommended Reading Anderson, R. (2008) Security Engineering: A Guide to Building Dependable Distributed Systems, 2e, Wiley Computer Publishing. Ferguson, N. & Schneier, B. (2003) Practical Cryptography, John Wiley & Sons. This is not optional ! You will need to understand and answer the questions asked. Just browsing the web and reading Wikipedia and my notes isn't enough, it leads to shallow learning. The exam tests deeper learning and knowledge. Rote learning won't pass at UK University undergraduate year 2 level.

Part A 1. Question on consumer firewall configuration and security design rationale. 2. Question covering your knowledge of crypto key management and Kerkhoff's principle. 3. Question covering a. Regulation of Investigatory Powers act and b. Data retention directive EU Directive 2006/24/EC

Part B 4. Question covering your knowledge of the Clark Wilson Integrity Model. 5. Question covering your knowledge of the use of prime numbers and primality testing in cryptography - with worked example calculation. 6. Question covering your understanding of RSA mathematics in key generation, encryption and decryption of small numbers.

Finally Please attend this and next week's tutorial sessions where we will be going through the RSA and prime numbers maths using debugging techniques to view these calculations step by step. Good Luck !