微淘公眾平臺(tái)推廣營(yíng)銷方法詳解-文庫(kù)吧資料
2025-01-29 08:04本頁(yè)面
【正文】 n Scans for Windows, IE, IIS, SQL, MSDE, Exchange, Office, Commerce, Biztalk, SNA, and HIS vulnerabilities / patches.? English, German, French or Japanese builds!Staying Secure162。 Awarenessn Security Alert Notification Servicesn Vulnerability Assessment162。 The Windows 2023 and Windows Server 2023 Solutions for Security e with preconfigured ready to deploy templatesn Obviously you should test them before deploying them in a production environmentn They WILL break somethingWindows Server 2023 Security Guide162。 Security should not be ‘bolted on’n Design security into the solution from the beginningMicrosoft Solutions for SecurityWindows Server 2023 Security Guide162。 Countermeasuren Employ a work quarantine solution? Quarantines VPN users in a DMZ work while machine is checked for security policy pliance? After machine checks, packets are routed? If machine fails check, connection is droppedCountermeasures Summary162。 VPN servers usually allow users unfiltered access to the corporate intra162。 Unauthorized user connects or associates with work and receives IP addressn Starts scanning, enumerating and hacking162。 Countermeasuresn SYSKEY in mode 2 or 3? Key stored in your head (mode 2)? Key stored on a floppy (mode 3)w Protects password hashes with 128 bit symmetric encryptionw Either mode prevents ‘Nordahl’ bootdisk attackw Also prevents the DS Restore mode style attacksn EFS? Can be used to encrypt sensitive informationThreat – Unauthorized Network Access162。 Use Intrusion Prevention SystemsThreat – Physical Attacks162。 Compile C++ code with the VC7 piler /GS switch162。 Write secure code. ?162。 Block unnecessary ports162。 Countermeasures162。 Countermeasuresn Don’t worry about your hashes being stolen – make them immune to reversing in any reasonable amount of time!n Use 10 character or stronger plex passwords? Or better yet passphrases!? NT based operating systems support 128 character passphrasesn Change them every 60 days or less.n Minimum time before password can be changed 1 dayn Number of previous passwords remembered: at least 24Threat – Password Hash Attacks66 7 8 9 10 11Password Length60 Day PasswordsData from Microsoft calculations based on Phillipe Ochslin’s algorithms with a 1 Terabyte RainbowCrack database (research that is the basis for the new attack).Threat – Password Hash AttacksThreat Remote Code Execution162。 Countermeasuresn Use 2factor authentication on Windows 2023 and later works? Allows the use of the PKINIT Kerberos extension which replaces passwords with public/private keys for initial TGT at logonn Use strong 10 character or greater passwordsn Use IPSec ESP to encrypt work all work trafficn Use authentication to keep rogue users off your workThreat – Password Hash Attacks162。s password. Threat – Password Hash Attacks162。 Countermeasuren Require 2factor authenticationn Prevent malicious code from running in context of administrator or SYSTEM? Since this attack requires elevated privileges, any steps taken to counter this can be undone by the code running with these elevated privilegesn Arriving at this point means your security posture has failed elsewhere and you have other security issues to deal withThreat – Password Hash Attacks162。 Countermeasuresn Use strong passwords instead of an account lockout policy (which only protects weak passwords)? Educate administrators and users on how to create strong passwords. n Block access to ports that allow authentication from unauthorized works (. the Inter) with a firewall or IPSec port filtering policyn Shutdown unneeded services (Server service, FTP service etc.)Threat – Password Hash Attacks162。 Countermeasuresn RestrictAnonymous=2n Block access to TCP 139/445n Stop server serviceThreat – Password Attacks / Account Lockout Attacks162。 The VPN “firewall bypass” ServerThreat NULL Session Enumeration162。 Physical Attacks162。 Password Hash Attacks162。 NULL Session Enumeration162。 Avoid installing patches162。 Configure your system with an Inter routable IP address162。 Skilledn Uses Inter IP’s, but has router ACL’sn Latest OS SP, all OS critical updates, hasn’t patched the applications in a while if at alln 6 character passwords with account lockoutsn Only audits logon events and monitors for account lockouts by checking event logs periodicallyn Suspicious of default settings? Performed some OS hardening by hand – didn’t harden the applications thoughSystem Admin Personas162。 SophisticatedSystem Admin Personas162。 Default162。 An example of what not to do162。 Patch the applications (SQL, IIS, Exchange etc.)Securing Windows NetworksOverview – Sec
法律信息相關(guān)推薦
鄂ICP備17016276號(hào)-1