Τεχνολογικό Εκπαιδευτικό Ίδρυμα Κρήτης Σχολή Τεχνολογικών Εφαρμογών Τμήμα Εφαρμοσμένης Πληροφορικής & Πολυμέσων Πτυχιακή εργασία Τίτλος: Μελέτη και δοκιμαστική λειτουργία των μηχανισμών ασφάλειας που παρέχει η πλατφόρμα Microsoft Windows XP ΚΟΥΡΟΣ ΚΩΝΣΤΑΝΤΙΝΟΣ (Α.Μ. 355) Ηράκλειο - Ημερομηνία Επόπτης Καθηγητής: Δρ. Μανιφάβας Χαράλαμπος 1 Περιεχόμενα Περιεχόμενα ..................................................................................................................2 Εισαγωγή.......................................................................................................................4 Σκοπός μελέτης...............................................................................................................................4 Λίγα λόγια για τα Windows XP......................................................................................................4 Προβλήματα ασφάλειας..................................................................................................................5 Τα passwords και η λειτουργία τους.............................................................................7 Windows Passwords............................................................................................................ 7 PASSWORDS.................................................................................................................................7 RECOVERY-CRACKING.............................................................................................................8 LC5 βήμα προς βήμα ....................................................................................................................16 Παρατηρήσεις και Προτάσεις .......................................................................................................23 Office passwors.................................................................................................................. 26 Passwords......................................................................................................................................26 Cracking........................................................................................................................................28 Παρατηρήσεις και Προτάσεις .......................................................................................................35 Ψηφιακές ταυτότητες και υπογραφές........................................................................37 Microsoft Outlook ............................................................................................................. 37 Εισαγωγή ......................................................................................................................................37 Προβλήματα παλαιοτέρων εκδόσεων ...........................................................................................37 Outlook 2003 ................................................................................................................................38 Ψηφιακές Ταυτότητες....................................................................................................... 42 Εισαγωγή ......................................................................................................................................42 Digital ID στο Outlook .................................................................................................................42 Digital ID στα Word και Excel .....................................................................................................47 Εργαλεία ανίχνευσης προβλημάτων ασφάλειας ........................................................50 Windows Firewall ............................................................................................................. 50 Γενικά ...........................................................................................................................................50 Το Firewall των Windows XP ......................................................................................................51 Microsoft Baseline Security Analyzer ............................................................................. 53 Εισαγωγή ......................................................................................................................................53 Λειτουργία ....................................................................................................................................53 Microsofts’ Security Risk Self-Assessment Tool ............................................................ 57 Γενικά ...........................................................................................................................................57 Λειτουργία ....................................................................................................................................57 Στην Πράξη...................................................................................................................................58 Microsoft Windows Defender .......................................................................................... 65 Εισαγωγή ......................................................................................................................................65 Λειτουργία ....................................................................................................................................65 Windows Malicious Software Removal Tool.................................................................. 71 Γενικά ...........................................................................................................................................71 Λειτουργία ....................................................................................................................................71 Windows Genuine Advantage.......................................................................................... 75 Γενικά ...........................................................................................................................................75 Λειτουργία ....................................................................................................................................75 Προβλήματα..................................................................................................................................76 Windows Encrypted File System ..................................................................................... 77 Εισαγωγή ......................................................................................................................................77 2 Λειτουργία ....................................................................................................................................81 Ασφάλεια ......................................................................................................................................82 Σχετικά θέματα .............................................................................................................................83 Ανάκτηση......................................................................................................................................83 Ασφαλείς διαμόρφωση (Hardening Windows)..........................................................84 Υπηρεσίες των Windows .................................................................................................. 84 Εισαγωγή ......................................................................................................................................84 Υπηρεσίες .....................................................................................................................................84 Secure Service on Windows XP ....................................................................................... 88 Εισαγωγή ......................................................................................................................................88 Τι πρέπει να γίνει ..........................................................................................................................88 Μια Ματιά στο μέλλον................................................................................................93 Microsoft Windows Vista ................................................................................................. 93 Εισαγωγή ......................................................................................................................................93 Προηγμένη Ασφάλεια...................................................................................................................94 Public Key Infrastructure ................................................................................................ 97 Γενικά ...........................................................................................................................................97 What's New in Windows Server 2003 ..........................................................................................97 Παράρτημα ...............................................................................................................100 Πλήρης οδηγός για προστασία Home User σε περιβάλλον Windows......................... 100 Εντοπίζοντας και εξολοθρεύοντας απειλές.................................................................................100 Διάφορες άλλες ρυθμίσεις και patches .......................................................................................102 E-mail Security ...........................................................................................................................103