Windows Vista System Integrity Technologies.ppt

Refactoring IE LP IE IEUser IL=high if adminIL=medium otherwise LP IE Internet ZoneIL=low Intranet/Trusted ZoneIL=mediumSeparate TIF IEPolicy IL=high Again: the principle of least privilege Refactoring at the process level—more efficient and less expensive than a virtual machine Components and zones Operation Requirements Process URL navigation and HTML rendering Least privilegeLow integrity LP IE Managing user-controlled settings Least privilegeMedium integrity IEUser Enforcing policy in downloaded codeInitiating execution Full privilegeHigh integrity IEPolicy(service) Operation LP IE low LP IE medium Files downloaded in zone Low IL Medium IL Modify outside TIF No Yes Interact with other apps on desktop No Yes Inject DLL and create remote thread No Yes Renders HTML files in local zone Yes Yes Installing from the Web LP IE IEPolicy Run? …\TIF\greatstuff.exe TrustGreatStuff? IL=low …\My Docs\greatstuff.exe IL=high if adminIL=medium otherwise AIS Run withfull privs? greatstuff.exe \Progs\GS\stuff.exestuff.dll IL=high full priv In-proc compatibility layer Redirects file and registry key writes to new low integrity locations— HKCU\Software\Microsoft\Internet Explorer\Low Rights\Virtual Documents and Settings\%user profile%\Local Settings\Temporary Internet Files\Virtual Added to the location IE is trying If IE tries to write here… …it gets redirected here HKCU\Software\FooBar HKCU\Software\MS\IE\Low Rights\Virtual\Software\FooBar C:\Documents and Settings\%user profile%\FooBar C:\Documents and Settings\%user profile%\Local Settings\Temporary Internet Files\Virtual\FooBar Anything Else Good? Thanks to Steve Riley for the slides steve.riley@ /steriley Additional Resources Web Resources Windows Vista BitLocker Client Platform Requirements /whdc/system/platform/hwsecurity/BitLockerReq.mspx Specs and Whitepapers /whdc/system/platform/hwsecurity/default.mspx Windows Logo Program Testing /whdc/GetStart/testing.mspx Trusted Computing Group (TCG) Website BitL