- 1、本文档共88页,可阅读全部内容。
- 2、有哪些信誉好的足球投注网站(book118)网站文档一经付费(服务费),不意味着购买了该文档的版权,仅供个人/单位学习、研究之用,不得用于商业用途,未经授权,严禁复制、发行、汇编、翻译或者网络传播等,侵权必究。
- 3、本站所有内容均由合作方或网友上传,本站不对文档的完整性、权威性及其观点立场正确性做任何保证或承诺!文档内容仅供研究参考,付费前请自行鉴别。如您付费,意味着您自己接受本站规则且自行承担风险,本站不退款、不进行额外附加服务;查看《如何避免下载的几个坑》。如果您已付费下载过本站文档,您可以点击 这里二次下载。
- 4、如文档侵犯商业秘密、侵犯著作权、侵犯人身权等,请点击“版权申诉”(推荐),也可以打举报电话:400-050-0827(电话支持时间:9:00-18:30)。
查看更多
Hardening Systems Windows NT.ppt
Hardening Systems: Windows NT Stephen M. Nugen, CISSP NebraskaCERT smnugen@ Introduction Purpose Discuss Windows NT-specific InfoSec issues Provide pointers to specific checklists, etc. Focus Windows NT 4.0 Still outselling Windows 2K Next year: Windows 2K and/or Whistler (- .NET) Server and Workstation versions Broad rather than deep... Consider multiple areas of vulnerability Some topics just too hard or too site-specific to cover with everything else... Understanding the “why” behind the vulnerability, mitigation Preparing for multiple variations on a theme InfoSec is the journey that never ends Introduction cont’d Caveat Presenting and discussing information gleamed from multiple sources Sources believed to be reliable Some sources old... some details may be OBE depending on what service packs, patches, hot-fixes have been installed at your site Some, but not all of these have been tested Limitations of any single presenter... IMPORTANT USE THESE NOTES ONLY AS IDEAS FOR FURTHER STUDY POINTS OF REFERENCE... KEYWORDS FOR SEARCHING TECHNET, MSDN, ETC. CHANGES TO REGISTRY VERY DANGEROUS BACKUP REGISTRY FIRST EXPLORE WITH REGEDT32.EXE... USE OPTIONS | READ-ONLY DON’T TRUST NUGEN’S SPELLING, TYPE, OR VALUE FOR ANY PARTICULAR REGISTRY KEY, ETC LOOK IT UP Introduction cont’d Assumed Already understand InfoSec basics Already understand Windows NT basics Style Very informal Questions and suggestions welcome anytime Now Later If need the source for any specific suggestion/topic, send email to nt-sec@ Ask about abbreviations... like HKLM = HKEY_LOCAL_MACHINE HKCU = HKEY_CURRENT_USER Introduction cont’d Structure Accounts Resources Auditing Services Network Other OBE Exploits Sources Accounts Password Restrictions Passwords should expire after xx days to limit scope of compromised password Password length 12 characters For W9X systems, password length of 8 very bad since encrypted in 7-byte chunks Password uniqueness Don’t keep reusing compromised passwords Set Passwo
您可能关注的文档
- 7大个人电脑类股.ppt
- 8体育养生.ppt
- 8入门基础.ppt
- A Flash Of Euro.ppt
- A Guide to Windows NT Server.ppt
- Access Windows Embedded CE 6.0 Source Code.ppt
- ADM390 Microsoft Windows Crash Dump Analysis.ppt
- Administration Sécurité Sous windows et linux.ppt
- Administration Windows Technologies NT.ppt
- Adobe Flash 9.ppt
- Hardening Windows 2003ppt.ppt
- HARDENING WINDOWS XP .ppt
- High DPI - Windows 7 Training Kit Presentation.ppt
- How To Eat Fried Worms Vocabulary Flash Cards.ppt
- How Windows Store Passwords.ppt
- Human Performance Assessment of BNL Arc-Flash Even…….ppt
- Hybrid Hard Drives with NonVolatile Flash and Lon…….ppt
- I 2 C Bus Drivers for Windows 2K XP.ppt
- Image Deployment with Ghost and Windows Imaging Fo…….ppt
- Implementing Client Security on Windows 2000 and W…….ppt
最近下载
- 《市政排水管道气囊封堵施工规程》.pdf
- TOPRAAD920印刷模切开槽机.pdf VIP
- 单相整流电路建模与仿真.doc VIP
- 缺血性脑血管病临床管理指南解读.pptx VIP
- 工程概算预算审核方案(3篇).docx VIP
- 神经重症气管切开患者气道功能康复与管理专家共识2024.pptx VIP
- 2025年监理工程师之监理概论考试题库及答案(名师系列).docx VIP
- 2025年监理工程师之监理概论押题练习试卷B卷附答案 .pdf VIP
- 2025年监理工程师之监理概论考试题库及完整答案(必刷).docx VIP
- 2025年监理工程师之监理概论押题练习试卷A卷附答案 .pdf VIP
文档评论(0)