Đang chuẩn bị nút TẢI XUỐNG, xin hãy chờ
Tải xuống
Router là thiết bị rất thông minh, và họ lưu trữ thông tin về mạng mà chúng được kết nối. Hầu hết các router có thể được cấu hình để hoạt động như tường lửa lọc gói tin. Nhiều người trong số mới hơn Quá trình này thêm phức tạp bổ sung để xử lý. | Devices 121 Many of the newer systems such as Windows 2000 allow permissions to be established to prevent software installation. You would want to evaluate the capabilities of the settings in the workstations for security. This process is referred to as locking down a desktop. You can lock down most desktops to prevent the installation of software. This may also prevent users from automatically upgrading software and it may create additional work for the IS department. You will need to evaluate both issues to determine what the best approach to take is. Servers Most modern server products also offer workstation functionality. In fact many servers are virtually indistinguishable from workstations. Linux functions as both a workstation and a server in most cases. Windows 2000 while having multiple versions of workstation and server communicates to networks in a virtually identical manner. Most successful attacks against a server will also work against a workstation and vice versa. Additionally servers will run dedicated applications such as SQL Server or a full-function web server. An early version of IIS installed a default mail system as a part of its installation. This mail system was enabled unless specifically disabled. This mail server suffered from most of the vulnerabilities that were discussed in Chapter 2 Know Your Enemy as they related to virus and worm infections. Make sure that your system runs only the services protocols and processes that are needed. Turn off or disable things you do not need. Mobile Devices Mobile devices including pagers and Personal Digital Assistants PDAs are becoming very popular. Many of these mobile devices use either RF signaling or cellular technologies for communication. If the device uses the Wireless Applications Protocol WAP the device in all likelihood does not have security Copyright 2003 SYBEX Inc. 1151 Marina Village Parkway Alameda CA 94501. World rights reserved. 122 Chapter 3 Infrastructure and Connectivity enabled.