Windows XP Security

1
Windows XP Security

• Jon Davis

2
Introduction

• New of age malicious software
• Four minutes to corruption
• In 2004, one virus caused 80 infection
• Downloading one media file caused
• 31 Spyware/adware programs
• 58 folders
• 786 files
• 11,915 registry entries

3
New Features in XP

• Software Restrictions
• Path
• Hash
• Certificate
• Internet Zones
• Enforcement Properties
• Designated File Types
• Trusted Publishers

4
New Features in XP (cont.)

• New Service Accounts
• LocalSystem Account
• Local Service Account (new)
• Network Service Account (new)

5
Polices and Permissions

• Account Policies
• Password Policies
• Account Lockout
• Local Policy
• Auditing policy
• User Rights Assignment

6
Polices and Permissions

• Registry Policies
• Registry Permissions
• Modify File System
• File and folder permissions
• Recommended file and folder permissions

7
Polices and Permissions

• Firewall Configuration
• Recommended Usage
• Packet inspection
• Protection from port scans
• What it doesnt provide

8
Polices and Permissions

• Additional Security
• Shared resource permissions
• RunAs command

9
Windows XP Flaws

• Windows 2k boot disk hack
• Solution
• Physically protect PC
• Set up BIOs password
• Encrypt files (EFS)

10
Windows XP Flaws

• Plug n Play security hole
• Patch was released

11
Windows XP Flaws

• Spyware
• Devious/Misleading
• Unavoidable
• Solution

12

• DONT USE THE INTERNET

13
Conclusion

• Windows XP
• Started flawed
• Endless patches
• Still flawed
• Security is in users hands

14
Questions?