Question

This project is to be performed individually or by a group of up to two students. You willl use C++ and /or Assembly programming language to develop the project described below. You will turn in a printout of the source code and a report as assigned. No late work will be accepted! Think about the following scenario: SYSTEM: An ATM requires a four digit pin-number (0 to 9999). ATTACK: A hacker is trying to find a PIN number to access the ATM system by applying a brute force attack. The hacker believes that he can guess the pin number in about 5000 tries, so he starts with the value zero and without knowledge of any defense mechanism keeps incrementing the pin by one. After trying 10,000 times, the attacker may think that the user changed his PIN number during the attack, so he will try again the full exhaustive search 4 more times and then give up DEFENSE: The security administrator for the ATM system implemented a mechanism that will randomly change the PIN number if there are 50 wrong attempts PROJECT: In order to verify how good your defense system is, you will write a program that starts by randomly choosing a numeric PIN of length 4 digits (in the range 0 to 9,999). The same program will run an exhaustive search to find the chosen pin, starting with value zero. Your program must choose a new random PIN after 50 wrong attempts from the attacker. The program should measure the number of iterations (guesses) required to find a match, if one is not found it should report that the defense system worked well The program must be run at least 10 times, each time with a new initial random value (you may decide to run the program 10 times or restart the test by adding an external loop). When running 10 times make sure the initial random number is different by changing its seed. At the end of all tests, if the PIN number was found, the defense must change its strategy by reducing the number of attempts to 25 and rerunning the test. Your report must contain the results of all tests, the average number of iterations required to guess the correct PIN number (if found), and a graph (one for 50 allowed attempts and one for 25 attempts if this test is also ran) plotting all the tests results as a percentage of success against the maximum number of guesses, which implies 100% wll happen when the attacker is unable to find the PIN number as a function of the trial number (MS Excel is recommended for the tabulations and plotting and MS Word for the report preparation) EXAMPLE: Initial PIN number selected: 241, attacker tries 0 to 49, then system changes PIN to 125, attacker tries 50 to 99, system changes again and so on

Answer 1

--------------------I used Visual Studio 2013, C++ Language, Console App------------

NOTE:

First thing you keep in mind, This question is hypothetical because in any bank ATM if 3 tries wrong then card is blocked.

So in this case what i did is, In each attempt from 0 to 9999 at every 50 wrong entries it is creating new PIN from next 50 to 9999;

For example : Hacker attempted 50 times, that is 0 to 50.

At 50 wrong attempts new PIN generate from 50+50 = 100 to 9999, So next hacker attack from 50 to 100 but the new PIN generate between 100 to 9999

At 100 wrong attempts new PIN generate from 100+50 = 150 to 9999,So next hacker attack from 100 to 150 but the new PIN generate between 150 to 9999

In this way we will be always ahead of the next 50 numbers he gonna enter, atlast he will enter 9950, At that time code will generate from 0 to 9999(Only in this case he might get success).

--------OUTPUT-------

8 Quick Launch (Ctrl+Q) DATMRandom Numbers (Running) - Microsoft Visual Studio (Administrator) FILE EDIT VIEW PROJECT BUILD DEBUG TEAM TOOLS TEST ARCHITECTURE ANALYZE WINDOW HELE Sign in II . Code Map - Continue Debug Stack Frame GenerateRandomPIN Process:12364] ATMRandomNumbers.exe Suspend Thread: [2636 Main Thread ATMRandom Numbers.cpp X Solution Explorer DAHari ATMRandom Numbers\Debug\ATM Random Numbers.exe (Global Scope) Attempt 1: Defense system is strong Attempt 2 :: Defense system is strong Attempt 3 :: Defense system is strong Search Solution Explorer (Ctrl+) ATMRandomNumbers' (1 pr 33 34 External Dependencies Header Files Attempt 6 :: Defense system is strong Attempt 7 : Defense system is strong 20 37 E stdafx.h 36 Btargetver.h Resource Files systAttempt 1 Defense system is strong retu Press any key to continue . . AG 41 ATMRandomNumbers.cpp stdafx.cpp ReadMe.bxt 45Eint Gene 40 int int int 4 56 100 % . Autos Name ATHRGNNNGnErs.EXe Sz Lded waons 1Syswoeeryptoase.ur ATMRandomNumbers.exe (Win32): Loaded 'C:\Windows SysWOW64\bcrvptprimitive Solution Explorer Team Explorer Autos Locals Watch 1 Ready 01:26 Type here to search ENG 01-07-2019

-----CODE-------

#include "stdafx.h"
#include <stdio.h>
#include <stdlib.h>
#include<time.h>
#include <iostream>
using namespace std;

int GenerateRandomPIN(int);

int main()
{
   srand(time(0)); //Used to get random number at each time
   for (int k = 0; k < 10; k++) // Running 10 times
   {
       int userEnteredPIN = 0;
       bool PINgotit = false;
       //Hacker tries from 0 to 9999
       for (int attemptedPIN = 0; attemptedPIN < 10000; attemptedPIN++)
       {
           if (attemptedPIN % 50 == 0) //At each 50 generating new random number
           {
               //GenerateRandomPIN parameter is the attempt number
               userEnteredPIN = GenerateRandomPIN(attemptedPIN);
           }
           if (attemptedPIN == userEnteredPIN)//if matched, terminate this loop
           {
               PINgotit = true;
               break;
           }
       }
       cout << "Attempt " << k+1<<" :: ";
       if (PINgotit)
           cout << "Hacked!!!... Defense system is weak" << endl;
       else
           cout << "Defense system is strong" << endl;
   }
   system("pause");
   return 0;
}

int GenerateRandomPIN(int val)
{
   int pin;
   int fromValue = val + 50;
   int numCount = 10000 - fromValue;

   // If numCount=0, then get random num between 0 to 10000
   //That is the last try from the hacker
   if (numCount == 0)
       pin = rand() % 10000;
   else
       // numCount is the limit and fromValue is the starting point
       //For Ex: Let say numCount = 100 and fromValue = 50 ,
       //Then generated pin number between 50 to 150, that is numCount(100) will add with fromValue
       //So min range is 50 and max range is 150
       pin = rand() % numCount + fromValue;

   return pin;
}