- 1、本文档共88页,可阅读全部内容。
- 2、有哪些信誉好的足球投注网站(book118)网站文档一经付费(服务费),不意味着购买了该文档的版权,仅供个人/单位学习、研究之用,不得用于商业用途,未经授权,严禁复制、发行、汇编、翻译或者网络传播等,侵权必究。
- 3、本站所有内容均由合作方或网友上传,本站不对文档的完整性、权威性及其观点立场正确性做任何保证或承诺!文档内容仅供研究参考,付费前请自行鉴别。如您付费,意味着您自己接受本站规则且自行承担风险,本站不退款、不进行额外附加服务;查看《如何避免下载的几个坑》。如果您已付费下载过本站文档,您可以点击 这里二次下载。
- 4、如文档侵犯商业秘密、侵犯著作权、侵犯人身权等,请点击“版权申诉”(推荐),也可以打举报电话:400-050-0827(电话支持时间:9:00-18:30)。
查看更多
Hardening Systems Windows NT.ppt
Hardening Systems: Windows NT Stephen M. Nugen, CISSP NebraskaCERT smnugen@ Introduction Purpose Discuss Windows NT-specific InfoSec issues Provide pointers to specific checklists, etc. Focus Windows NT 4.0 Still outselling Windows 2K Next year: Windows 2K and/or Whistler (- .NET) Server and Workstation versions Broad rather than deep... Consider multiple areas of vulnerability Some topics just too hard or too site-specific to cover with everything else... Understanding the “why” behind the vulnerability, mitigation Preparing for multiple variations on a theme InfoSec is the journey that never ends Introduction cont’d Caveat Presenting and discussing information gleamed from multiple sources Sources believed to be reliable Some sources old... some details may be OBE depending on what service packs, patches, hot-fixes have been installed at your site Some, but not all of these have been tested Limitations of any single presenter... IMPORTANT USE THESE NOTES ONLY AS IDEAS FOR FURTHER STUDY POINTS OF REFERENCE... KEYWORDS FOR SEARCHING TECHNET, MSDN, ETC. CHANGES TO REGISTRY VERY DANGEROUS BACKUP REGISTRY FIRST EXPLORE WITH REGEDT32.EXE... USE OPTIONS | READ-ONLY DON’T TRUST NUGEN’S SPELLING, TYPE, OR VALUE FOR ANY PARTICULAR REGISTRY KEY, ETC LOOK IT UP Introduction cont’d Assumed Already understand InfoSec basics Already understand Windows NT basics Style Very informal Questions and suggestions welcome anytime Now Later If need the source for any specific suggestion/topic, send email to nt-sec@ Ask about abbreviations... like HKLM = HKEY_LOCAL_MACHINE HKCU = HKEY_CURRENT_USER Introduction cont’d Structure Accounts Resources Auditing Services Network Other OBE Exploits Sources Accounts Password Restrictions Passwords should expire after xx days to limit scope of compromised password Password length 12 characters For W9X systems, password length of 8 very bad since encrypted in 7-byte chunks Password uniqueness Don’t keep reusing compromised passwords Set Passwo
您可能关注的文档
最近下载
- 气体充装站隐患排查清单(24页).pdf
- 《心理卫生评定量表手册(增订版)》.doc
- 2025年郑州铁路职业技术学院高职单招职业技能测试近5年常考版参考题库含答案解析.docx
- 明代山东地区枣强裔移民考.pdf VIP
- Magpie Murders《喜鹊谋杀案(2022)》第一季第三集完整中英文对照剧本.docx VIP
- 公务员的职业发展与个人规划.docx VIP
- 2025成人肥胖食养指南(完整版) .pdf VIP
- DLT-612-2017-电力行业锅炉压力容器安全监督规程.pdf
- 2023年高考真题完全解读:2023年高考政治真题解读(新课标卷:安徽、云南、山西、吉林、黑龙江).docx VIP
- 药物化学重点总结【参考】.doc
文档评论(0)