a security evaluation of a non-distributed version of windows nt 1new

《a security evaluation of a non-distributed version of windows nt 1new》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、ASecurityEvaluationofaNon-DistributedVersionofWindowsNT1HansHedbom†,StefanLindskog†andErlandJonsson‡†‡DepartmentofComputerScienceDepartmentofComputerEngineeringUniversityofKarlstadChalmersUniversityofTechnologyS-65188Karlstad,SWEDENS-41296Göteborg,SWEDENHans.Hedbom@hks.seErland.Jonsson@ce.chalm

2、ers.seStefan.Lindskog@hks.seAbstractInthispaperwepresentanevaluationofthesecurityinWindowsNT.Theobjectivesoftheworkaretwofold:first,tolearnmoreaboutthesecuritysys-tem;and,second,tofindouthowsecurethesystemactuallyis.Toinvestigatethelatter,theauthors,haveadoptedtheroleofattackers.Thispapercontains

3、resultsfromseveralattemptstoviolatethesecurityofWindowsNT.Insomecases,theattemptsweresuccessful,meaningthatwegainedaccesstoinforma-tionorresourcesthatshouldbeprotected.ThetargetsystemswerestandardpersonalcomputerswithWindowsNTWorkstation3.51andWindowsNTWorkstation4.0respectively,bothworkinginst

4、and-alonemode.1.AnabridgedversionappearedinProceedingsoftheSecondNordicWorkshoponSecureComputerSystems(NORDSEC’97),Espoo,Finland,November,1997.1.Scope..............................................................................................................32.Introduction....................

5、................................................................................33.SystemOverview...........................................................................................43.1Background.............................................................................................

6、..................43.2SystemArchitecture.................................................................................................43.3Executive..................................................................................................................53.4ProtectedSubsystems........

7、.......................................................................................63.5Usersandgroups......................................................................................................83.6Objects............