Each question will require 2 or 3 well defined paragraphs to fully answer. 1) D

Each question will require 2 or 3 well defined paragraphs to fully answer.
1) Distinguish between a vulnerability, threat and control. Give an example of each.
2) Theft usually results in some kind of harm. For example, if someone steals your car, you may suffer financial loss, inconvenience (by losing your mode of transportation), and emotional upset (because of invasion of your personal property and space). List three kinds of harm an OEM might experience by theft of proprietary information (PI) (i.e. trade secrets). Give examples of the type of harm you identify.
3) List at least three kinds of harm a company could experience from electronic espionage or unauthorized viewing of confidential company materials. Give an example for each harm identified.
4) List at least three kinds of damage a company could suffer when the integrity of an embedded software or data is compromised.
5) List at least three kinds of harm a company could encounter from loss of service, that is, the failure of availability. List the product or capability to which access is lost, and explain how this loss hurts the company.
6) Describe two examples of cybersecurity vulnerabilities in automobiles for which auto manufacturers have instituted controls. Justify why you think these controls are effective, somewhat effective or ineffective.
7) Describe an example, in detail, in which absolute denial of service (DoS) to the driver of a vehicle, (that is, the driver gets no response from the system), is a serious problem for that user. Describe another example where 10% DoS to a driver (that is, the systems computation progresses, but at a rate of 10% slower than normal) is a serious problem to that driver.
8) Engineers often think of software quality in terms of faults and failures. Faults are problems, (for example, loops that never terminate or misplaced commas in statements), that engineers can see by looking at the embedded code. Failures, on the other hand, are problems such as a system crash or the invocation of the wrong function that are visible to the user. Thus, faults can exist in program but never become failures because the conditions under which the fault becomes a failure are never reached. How do software vulnerabilities fit into this scheme of faults and failures? Is every fault a vulnerability? Is every vulnerability a fault? Justify your response.
9) Consider a program that allows a surgeon in one city to assist in an operation on a patient in another city via an Internet Connection. Who, (adversary), might want to attack the program and why might they want to — what is their motivation? What types of harm might they want to cause? What kinds of vulnerabilities might they exploit to cause harm, basluved on what you know today?