Sigurnost u Windows 7. Saša Kranjac MCT

Transcription

1 Sigurnost u Windows 7 Saša Kranjac MCT

2 Agenda Stara, dobra*, (ne)sigurna vremena Novo (i bolje) u Windows 7 Sigurnosna poboljšanja i značajke + DEMO Što nam dolazi u Windows 8?

3 OS podjela (08/2011) Windows XP Windows 7 Windows Vista MacOS X ios Linux

4 OS podjela (11/2011)

5 Microsoft Security Intelligence Report (SIR) Volume 11

6 Novo (i bolje) u Windows 7 OS sigurniji iz temelja Siguran pristup Štiti podatke Štiti korisnike

7 OS sigurniji iz temelja Windows Vista Foundation User Account Control Enhanced Auditing Security Development Lifecycle process Kernel Patch Protection Windows Service Hardening DEP & ASLR IE 8 inclusive Mandatory Integrity Controls Make the system work well for standard users Administrators use full privilege only for administrative tasks File and registry virtualization helps applications that are not UAC compliant XML based Granular audit categories Detailed collection of audit results Simplified compliance management

8 Siguran pristup Network Security Network Access Protection DirectAccess TM Windows Firewall can coexist with 3rd party products Multi-Home Profiles DNSSec (RFCs 4033, 4034 and 4035) Ensure that only healthy machines can access corporate data Enable unhealthy machines to get clean before they gain access Security protected, seamless, always on connection to corporate network Improved management of remote users Consistent security for all access scenarios

9 Štiti podatke RMS EFS BitLocker TM Policy definition and enforcement Protects information wherever it travels Integrated RMS Client Policy-based protection of document libraries in SharePoint User-based file and folder encryption Ability to store EFS keys on a smart card Easier to configure and deploy Roam protected data between work and home Share protected data with co-workers, clients, partners, etc. Improve compliance and data security

10 Štiti korisnike AppLocker TM Internet Explorer 8 Data Recovery Enables application standardization within an organization without increasing TCO Increase security to safeguard against data and privacy loss Support compliance enforcement Protect users against social engineering and privacy exploits Protect users against browser based exploits Protect users against web server exploits File back up and restore CompletePC image-based backup System Restore Volume Shadow Copies Volume Revert

11 Sigurnost SADA! Advanced Audit Policy BitLocker i BitLocker To Go AppLocker UAC

12 Advanced Audit Policy

13 Advanced Audit Policy Podržani: Windows 2008 R2 Windows 7 Verzije: OS članovi Domene

14 Advanced Audit Policy 9 Security Settings\Local Policies\Audit Policy 53 Security Settings\Advanced Audit Policy Configuration

15 BitLocker

16 BitLocker

17 BitLocker

18 BitLocker

19 BitLocker To Go BitLocker TPM OS Data Particije (fiksne) TPM, Dongle, Pin Sistemska Particija BitLocker to Go Data Particija (Removable) Password, Auto-Unlock, Smartcards XP / Vista (read only)

20 AD BitLocker Key Recovery AD Schema ekstenzija Svi DC Windows Server 2003 SP1 + Podrzano na Windows Server 2008 R2 +

21 AppLocker Prije: Software Restriction Policy Fleksibilniji pristup: što, kada, kako, koga Granularniji pristup Migracija sa SRP -> AppLocker: NE Application Identity (AppID) -> ON! U 1, 2, 3 (4) koraka!

22 AppLocker Feature Rule conditions provided Software Restriction Policies AppLocker Rule scope All users Specific user or group File hash, path, certificate, registry path, and Internet zone rules File hash, path, and publisher rules Rule types provided Allow and deny Allow and deny Default rule action Allow or deny Deny Audit-only mode No Yes Wizard to create multiple rules at one time Policy import or export No Yes No Yes Rule collection No Yes PowerShell support No Yes Custom error messages No Yes

23 AppLocker Klijenti: Windows 7 Windows Server 2008 / R2 Dostupno u Windows 7: Enterprise Ultimate Professional* - kreirati, NE i primijeniti

24 AppLocker Pravila 1. Eksplicitna zabrana 2. Eksplicitno dopuštenje 3. Implicitna zabrana

25 AppLocker Pravila: EXE DLL MSI Skripta Uvjet: Hash Path Publisher Akcija: Allow Deny

26 AppLocker

27 AppLocker Computer Policies Administrative Templates Windows Components Windows Explorer Set a Support Web Page Link

28 AppLocker Get-AppLockerFileInformation Get-AppLockerPolicy New-AppLockerPolicy Set-AppLockerPolicy Test-AppLockerPolicy

29 UAC SVI korisnički računi Standard User Rights Osim kad je UAC isključen

30 UAC 4 načina interakcije s korisnikom 3 ON + 1 OFF

31

32 Što nam dolazi u Windows 8? Trusted Boot UEFI (učitava anti-malware ranije, prevencija za rootkit, signed startup) AppLocker pristup datotekama kroz dopuštene aplikacije Picture Password Windows Defender ASLR +

33 HVALA! Kontakt kranjac.wordpress.com

34 HVALA! Kontakt kranjac.wordpress.com

35 HVALA! Kontakt kranjac.wordpress.com