Cs6262 Final Exam Questions With Correct Answers

To make a causative (or, poisoning) attack on machine learning successful, an attacker just needs to inject random noise into the training data. {Ans: False}If an IP address (i.e., an Internet host) is known to have hosted malicious domains, then the reputation of any domain that is resolved to (i.e., hosted by) this IP address is also tainted (i.e., more likely than others to be malicious). {Ans: True}Which of the following techniques is MOST responsible for making Kaminsky's DNS cache poisoning attack more successful than traditional cache poisoning attacks? {Ans: Query random subdomains}Should malware analysis be delayed? {Ans: No}According to the BGP protocol, an autonomous system can learn multiple autonomous system routes to an IP prefix. {Ans: True}A limitation to BotMiner is that a well designed botnet can evade A-Plane monitoring. {Ans: True - Botnets can evade A-plane monitoring by performing slow spamming and using undetectable activities. See slide 34 of the lectures and BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection.}