Microsoft

1
??????????? ?????????? Microsoft ??? ???????????
???????????? ?????????????? ??????

• ???????? ???????
• ???????? ?? ???????? ???????????? ?????????
  Microsoft
• vladim_at_microsoft.com

2
?????? ?????????? ?????????????? ??????
3
?????? ?????????? ?????????????? ??????

• ???????????? ??????
• ????????????? ??????
• ??????-????? ??????????

4
???????? ?????????? ????
???????????? ? ???????????

• ???????? ?????????? ???????????
• ????? ??????? ????????????
• ???????? ?????????? ??????????? ? ????? ?
  ???????????? ????

???????????? ?? ?????????

• ?????????? ?????????????? ???????
• ????????????? ???????????? ????????
  ??????????

???????????? ? ??????

• ?????????? ?????????
• ??????????? ?????????????
• ????????? ????
• ?????????? ?????????? ?? ??????

??????????????

• ????????
• ?????????? ?? ????????????? ? ?????????
• ?????????? ???????

5
??? ??? ??????????
???????????? ? ???????????

• ??? ???????????? ?????? ???????? ?? ?????????
  ??????????? ????
• ?????? ????? ????????????? ????
• ????????? ?????? ?????

???????????? ?? ?????????

• Office XP SP1 VBScript ???????? ?? ??.
• Windows XP IIS ???????? ?? ?????????
• Windows Server 2003 20 ????? ????????? ??
  ?????????

???????????? ? ??????

• ?????????? Baseline Security Analyzer
• ????. ???? ?? ?????????? ????????????
• ?????????? Security Toolkit
• ????? ????? ?? ????????????

??????????????

• ??????? ???????? ??????? ? XP
• Microsoft Security Response Center
• ?????? ? ?????????? ?? ????????????

6
?????? ?? ?????????? ????
???????????? ? ???????????

• ??????????? ????? CLR ??? ??????????? ? Windows
  Server 2003
• ???????? ??????????? ??????? ????????
• ?????????? ????? ??????????
• ??????????? ??????? ?????????? ??????? RMS
• ???????? ??? ???????????? ?????????? ? Web,
  ??????????, E-mailD
• ???????? ? ???????? ?????? ????????

7
?????? ?? ?????????? ????

• ??? ?????? ????????????? ?? ??????? ??????
  ??????????
• ???????????? ??????
• ?????????? ?????????
• ????????????? ?????
• ???????????? ??????
• ????????? ?????????

???????????? ? ??????
8
??????? ?????????????

• ??????
• ?????? ???????? ???????
• ??????? ?????????? ????????????
• ???????????? ?????????? ?? ????? ??????
• ??????????
• Active Directory ??????????????, ???????????,
  ????????? ????????
• Microsoft Baseline Security Analyzer (MBSA)
  ?????? ????????????
• ISA Server Firewall ???????? ???????????
• Windows networking ???????????? firewall ? VPN
• ?????? ??? ??????
• ISA Servers ? DMZ (????????? ?????????)
• PKI ?? ?????? CA Windows 2000 Server
• ????????????????? CSP ???????? ??????-???

9
??????? ?????????????

• ??????
• ?????? ? ????? ?????????? ???? ??????
• ??????? ????? ??????????? ??????? ?????????
• ???????????? ??? ???????? ????????
• ??????????
• Active Directory ????????? ????????
• ???????? Windows ??????????? ???????
• ???????????? ???????? ??????? ????????
• IDS ??????? ??????? ????????
• ?????? Silver Lake Partners
• ?????? Check Point VPN-1 ?? ISA Server ?
  ????????? ???????? Active Lane
• ?????????? ?????? ?? 50

10
??????? ?????????????

• ??????
• ?????? ???????? ???????
• ??????? ???????? ??????, ???????????? IP-???????
  ? ????? ?? ????? ??????
• ???????????? ?????????? ??????? ??????? ???
  ?????????????????? ?????????????
• ??????????
• Active Directory ?????????? ??????? ???????
• ???????????? ???????? ??????? ????????
• ISA Server Firewall ???????? ???????????

11
??????? ?????????????

• ??????
• ?????? ???????????? ??????????? ??? ??????????
  ?????
• ??????? ?????????????? ????? ???????
• ???????????? ???????????? ????????????
• ??????????
• ???????????? Shadow Copy ??? ??????????????
  ?????????? ??????
• ???????????? Automated System Recovery (ASR)
• ???????????? Remote Installation Services (RIS)
  ??? ???????? ?????????????? ???????????? ???????

12
??????? ?????????????

• ??????
• ?????? ????????? ????????? ???????
• ??????? ??????????? ? ???????? ????????????????
  ????????
• ???????????? ?????????? ????? ???????,
  ?????????? ?? ?????
• ??????????
• ????? ? ??????? ?????? Software Update Services
• ?????????? SMS 2.0 ? ????? Value Pack
• Active Directory ????????? ????????
• Microsoft Operations Manager (MOM)
• ?????? ?????????? Divine
• 20,000 ??????? ?? 1200 ???????? - 3 ????????
• ??????????? update ????? Code Red ?? 1200
  ???????? ?????? ?????? 4 ????

13
?????? ?? ?????????? ????

• ?????????????? ? ?????? ????????? GSP
  (Government Security Program) ??? ????????? ???
  ????????? ?????? ??????? ? ??????????????
  ????????
• ?????????????? ????? ???????? ????????????? ?
  ??????? ?????????????? ????????????
• ?????? ? ???????? ????? ? ???????????????
  ????????????
• ?????????????? ? ???????????????? ?????????????,
  ??????????? ?? ?????????????? ????????????

??????????????
14
????????????? ???????????? Windows 2000

• Microsoft Windows 2000 ??????????????? ?? ??????
  ??? ??????? ??????????? ???????????? ??????
  ??????? EAL4, ??????? ????? ?? ?????????? ??
  ????? ???????????? ????????
• ??????????????? ? ?????????????? ???????, ??
  ??????????? ??? ???????????? ??????? ??????
• ?????????? ???????????? ???????????? ?
  ????????????? ????????? ??? ??????
  Windows 2000 ?????? ????????
• Microsoft ??????? Windows Server 2003 ?
  Windows XP ?? ????????? ??????????????
  ??????????? ????? ?????????

15
Windows 2000 ???????????? ??? ????????????

• ??????? Controlled Access Protection Profile
  (CAPP)
• ?????????? C2 ?? ?????????????? ???????????
• ???????????? ??? ??????? ??
• Multi-Master Directory Service (???????
  ??????????)
• Active Directory
• L2TP/IPSEC-Base VPN (??????????? ??????? ????)
• Windows 2000 Professional VPN Client
• Windows 2000 Server VPN Services
• Single Sign-on (??????????? ???? ? ???????)
• ?????????? Kerberos
• ?????????? TLS
• Sensitive Data Protection Device
• ??????? ?????? ?????? ?? ?????? EFS
• Flaw Remediation
• Microsoft Security Response Center
• ?????? ???????
• ???????? ? ???????? ???????? ????????
• ??????? ??????????
• ?????????? ???????? ?????????

16
?????????? ???????????? ? ??????? ???????

• ??????????? ?? ?????? ????????????
• ????????? ???????? ???????? ?????? ????????????
  Windows 2000
• http//niap.nist.gov/cc-scheme
• ???????????????? Windows 2000 ?? ?????? ?????
  ???????????? CC
• Group Policy Security Templates ???
  ??????????????? ????????????????
• http//www.microsoft.com/technet/security/issues/W
  2kCCSCG/default.asp
• ??????????? ?????????????? ?? ????????????
  Windows 2000 ?? ?????? ????? ???????????? CC
• http//www.microsoft.com/technet/security/issues/W
  2KCCAdm.asp
• ??????????? ???????????? ?? ???????????? Windows
  2000 ?? ?????? ????? ???????????? CC
• http//www.microsoft.com/technet/security/issues/W
  2KCCUG.asp

17
????????????? ?????????? ??????

• ???????? ?? ???????????? ?? ???????????? ???????
  ??????????? ???????????? ???????
• Microsoft Windows XP Professional
• Microsoft Server 2003 Enterprise Edition
• ? ?????? ????????? ????? ???????????????
  ??????????, ?????????? ?? ????????????? ?????????
  ????? ????????, ???????? ?? ????????????
  ???????????? ???????
• Microsoft Server 2003 Enterprise Edition

18
??????????????? ??????????? ??????????

• ???????? ?????????? ??????? ?? ????????????
• ????????????????? ???????????? ??????-???
• ?????????????? ????? ??????-???
• ????????? ?????????????? ???????
• ??????? ????????????, ????? ? ?????? ?????????
• ???????? ? ??????? ??????? ????????
• ????????????, ???????????, ? ??????
• ??????????? ???????? ?? ?????????? ?????????
  ???????????? ? ??????????
• ????, ?????, ????????????

19
?????? ????????? ????????? ??????????

• ??????????? ????? ? ??????? ????????????
• PKI ?? ?????? Windows 2000 Server
• ???? ?????? SQL Server 2000
• ?????????????? ????? ???????? ??????-???
• ?????????? ???????????? ?? ??????-??? ? ?????????
  MS CSP
• ?????? ???????? ???????
• ?????????? ??? ?????? ??????
• ?????? - Exchange 2000
• ??? ? ????????????????? ?????????????
• ????????? ?????? ? ??????
• ?????????? ?????? Microsoft Internet Security and
  Acceleration Server (ISA Server)
• ????????? ?????????????? c ?????????????? eToken
  Aladdin
• ??????? ????? Windows 95 ? ???? ? Internet
  Explorer 5.0

20
?????? ??????? ?????????

• ?????????????? ????? ???????? ?????????????
  ??
• ?????????????? ????? ????????????? ?????????? ??
• ??????? ??? ?????????? ?????????? ?
  ??????????????? ?????????? ???????? ??
• ??????? ??????????? ???????????????? ?? ????????
  ????????? ?????????? ????? ????????

21
?????

• Microsoft ??? ???????? ???????????, ???????????
  ?? ?? ?????? ????????? ?????????? ??????????????
  ??????? ??? ??????????? ?????? ????????
• ?????????? ????????? ?? ????????????,
  ??????????????? ? ???????????? Microsoft,
  ???????? ????????? ?????? ????? ??????????
  ?????????????? ??????

22
www.microsoft.com/rus/security