Đang chuẩn bị liên kết để tải về tài liệu:
network security secrets and solutions scambray mcclure phần 5

Không đóng trình duyệt đến khi xuất hiện nút TẢI XUỐNG Tải xuống

cánh cửa trở lại vào mạng LAN của công ty của bạn, hoặc có thể được lưu trữ thông tin nhạy cảm trên một máy tính gia đình kết nối Internet. Với việc ngày càng tăng củanhưng những người có thể được cấu hình nó không có biện pháp phòng ngừa thích hợp (giống như lựa chọn mật khẩu tốt) | Chapter 6 Hacking Windows 2000 263 Use the new tools like Group Policy gpedit.msc and the Security Configuration and Analysis tool with additional templates to help create and distribute secure configurations throughout your Win 2000 environment. Enforce a strong policy of physical security to protect against offline attacks against the SAM and EFS demonstrated in this chapter. Implement SYSKEY in password- or floppy-protected mode to make these attacks more difficult. Keep sensitive servers physically secure set BIOS passwords to protect the boot sequence and remove or disable floppy disk drives and other removable media devices that can be used to boot systems to alternative OSes. Follow the Best Practices for using EFS found in the Win 2000 help files to implement transparent folder-level encryption for as much user data as possible especially for mobile laptop users. Make sure to export and then delete the local copy of the recovery agent key so that EFS-encrypted items are not vulnerable to offline attacks that compromise the Administrator recovery certificate. Subscribe to the NTBugtraq mailing list http www.ntbugtraq.com to keep up with current discussions on the state of NT 2000 security. If the volume of traffic on the list becomes too burdensome to track change your subscription to the digest form in which a digest of all the important messages from a given period are forwarded. To receive the NTSecurity mailing list in digest form send a message to listserv@listserv.ntbugtraq.com with set NTSecurity digest in the message body you do not need a subject line . The Win2KsecAdvice mailing list at http www.ntsecurity.net which largely duplicates NTBugtraq occasionally has content that the NTBugtraq list misses. It also has a convenient digest version. This page intentionally left blank. CHAPTER 7 Copyright 2001 The McGraw Hill Companies Inc. Click Here for Terms of Use. .