Strengths and Weaknesses of Possible Counter Measures

1. You have been hired by a bank to help them harden their online banking service against phishing
attacks. Explain briey the strengths and weaknesses of the following four possible countermeasures:
(a) SSL/TLS client certi_cates issued to each customer.
(b) A handheld password calculator issued to each customer.
(c) Displaying a unique picture to each customer during the login process.
(d) Requiring that large payments, or payments to new recipients, be authorised by telephone or SMS as well as online.

2-
Describe the following termininology in the content of anonymity:
(a) Anonymity.
(b) Unlinkability.
(c) Unobservability.
(d) Pseudonymity.

3-
These questions relate to hill climbing attacks.
(a) Explain how a hill climbing attack works in the context of biometrics.
(b) What assumptions underly the use of this attack?
(c) Based on the assumptions, how might we provide protection against a hill climbing attack?