Question

1. Consider an automated teller machine (ATM) to which users provide a personal identification number (PIN) and a card for account access. Give examples of confidentiality, integrity, and availability requirements associated with the system and, in each case, indicate the degree of importance of the requirement.

Answer 1

An automated teller machine (ATM) has confidentiality, integrity, and availability requirements associated with the system.

Confidentiality requirement: The ATM system must ensure that user information such as PIN and account number are kept confidential. This requirement is of high importance because if user information is compromised, it can lead to unauthorized access to user accounts and result in financial loss.

Integrity requirement: The ATM system must ensure that user information is not modified or tampered with during transmission or storage. This requirement is of high importance because if user information is modified, it can lead to unauthorized access to user accounts and result in financial loss.

Availability requirement: The ATM system must ensure that the service is available to users when needed. This requirement is of high importance because if the service is unavailable, users may not be able to access their accounts and may face financial loss.

In summary, confidentiality, integrity, and availability requirements associated with the ATM system are all of high importance to ensure that user information is kept secure and user accounts are not compromised.

Answer 2

Sure, I'd be happy to help you with that.

Confidentiality:
One confidentiality requirement of the system is that the transmission of the user's PIN and account information should be encrypted to prevent unauthorized access. This requirement is of utmost importance since the unauthorized disclosure of this information could lead to unauthorized access to the user's financial accounts, which could result in financial loss, fraud, and identity theft.

Integrity:
A requirement for the system's integrity is that the user's account balance, transaction history, and other account information must be accurate at all times. This requirement is of high importance because incorrect or manipulated data could result in the user being misled or experiencing a financial loss.

Availability:
A requirement for the system's availability is that it should always be accessible to users. In case of a system failure or downtime, users should have an alternative method to access their accounts. The importance of this requirement is high because if the system is not available, users cannot withdraw cash, transfer money or access their account, which could cause significant inconvenience and financial loss.