Computer Security U8 - Windows 2000 Security

Introduction
1. Memory & Privilege levels
  1. linear 32-bit (4GB) address space
2. Object-based security
  1. Securable objects
  2. Active Directory
    1. objects with attributes
3. programs
  1. processes
    1. threads
Basic concepts
1. Principals
  1. Security principals
    1. Security Identifiers (SIDs)
  2. groups
    1. security
    2. e-mail distribution
2. Objects
  1. instance of a class
3. Classes
4. Object Handler
  1. controls objects
    1. kernel objects
    2. executive obejcts
Active Directory
1. secure, distributed, scalable & replicated hierarchical directory service
2. integrates DNS
3. single point of admin (incl. security)
4. Objects
  1. GUID
  2. schema
  3. container
    1. can hold other objects
      1. e.g. directory
  4. leaf
5. Names
  1. security principal
    1. SIDs
      1. LDAP Distinguished Name (DN)
        Relative DN (RDN)
        canonical
        GUID
Domains & Organizational Units
1. domain controller
2. member server
3. organizational unit
  1. organize and contain AD objects
4. Trust relationships
  1. domain tree
    1. domains with common schema/configuration
  2. domain forest
    1. trees with common schema
    2. not a contiguous namespace in AD
  3. managed domains
5. Domain models
  1. single
  2. master
  3. multiple master
  4. complete trust
Authentication
1. ID verification
2. interactive logon
  1. network authentication
3. SAS
4. GINA DLL
  1. Local Security Authority (LSA)
5. Kerberos
  1. Key Dist. Centre (KDC)
    1. ticket-granting ticket (TGT)
      1. ticket-granting service (TGS)
  2. Single Sign-On (SSO)
Access Control
1. DACL
2. object handles
  1. handle table
    1. 28-bit pointer to object header
    2. 32-bit access mask
      1. handle file entries
        access control entires
        access requests
      2. generic access rights
        (R)ead
        (W)rite
        (X)ecute
        (A)ll
    3. 4 flags: (L)ock (A)udit (P)rotect (I)nherit
3. Control Access Rights
  1. extended
  2. property sets
  3. validated writes
4. privilege
  1. take-ownership
5. Impersonation
  1. Principle of Least Privilege
6. Access Tokns
  1. primary
  2. LSA
7. Security Descriptor
  1. control flags
    1. owner
      1. primary group
        DACL
        SACL
8. AC Entries
  1. Access-denied
    1. Access-allowed
      1. System-audit
Security Management & Audit
1. Security Configuration Tool Set (SCTS)
2. Group Policy Objects (GPOs)
3. Audit
  1. detect behaviour that violates policy
  2. analyse security breaches
  3. provide evidence for prosecution

Siguiente

Computer Security U8 - Windows 2000 Security

Descripción

Resumen del Recurso

Similar

	Creado por Nick.Bell2013 hace más de 11 años