1. most modern tcp implementations use pseudo-random number generators(prng) to determine starting sequence numbers for tcp sessions. with such generators, it is difficult to compute the ith number generated, given only the ( i - 1 )th number generated. explain what network security risks are created if an attacker is able to break such as prng so that he can in fact easily compute the ith number generated, given only the ( i - 1 )th number generated.

2. a hacker just set up a tcp connection with a web server in chicago, illinois, claiming he is coming in with a source ip address that clearly belongs to a network in copenhagen, denmark. in examining the session logs, you notice that he was able to complete the three- way handshake for this connection in 10 milliseconds. how can you use this information to prove he is lying?

3. explain how it would give potential intruder an additional advantage if he can spend a week stealthily watching the behaviors of the users on the computer he plans to attack.