资源描述：
《软件限制重策略》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。
1、软件限制重策略TheroleofsoftwareconstraintstrategySolet'stalkaboutthe3DoftheHIPSAD-theprogramprotectstheapplicationfrommaliciousmodification,deletion,andinjectionFD一fileprotectionkeyfilesarenotmodified,deleted,anddisablemaliciousprogramstocreateandreadfilesRD一the
2、registryprotectionregistrykeylocationisnotmodified,read,ordeletedWindowsownsoftwarerestrictionpolicycanachievetheaboveADandFD,asforRD,canbedonebytheregistrypermissions,soitcanbesaidthattheWindowsitselfhasthefunctionof3d,justdon'tbefamiliar・Theadvantagesan
3、ddisadvantagesofthesoftwareconstraintstrategy1,theadvantagesofAdvantageisobvious,itispartofthesystem,thereisnocompatibilityproblems,donottakeupmemory,belongtothesystembottomprotection,theviruscannotbetoshutitdown,protectionisfarfromHIPSsoftwarecanmatch,an
4、ditisadriver,evenifyoudon，tsetit,systemwillloadthedriver2,weaknessesDisadvantageisalsoevident,comparedwiththeHIPS,itisnotflexibleandintelligent,thereisnolearningmode,willnotstoptheprogramtocreateordeletefiles,itwillonlypreventdefaultorrelease,donotaskuser
5、s,improperrulesset,canleadtosomeprogramcannotberun.ThelocationofthesoftwarerestrictionspolicyLocalsecurity->softwareconstraintpolicyIfthesoftwarelimitpolicyhasnochildren,right-clickittocreateasoftwareconstraintpolicyThewildcardofthesoftwarerestrictionspol
6、icyThewildcardfor?And*two,right?Thedelegatedoesnothaveoracharacter,*representsnoorNcharactersC:*forallprogramsincdiskC:**.*forCplateunderthefolderoffiles(suchasC:Windowsfolderoftheprogram,whileafolderundertheprograminWindowsisinvalid)C:*.*theprogramu
7、ndertherootdirectoryofthecdisk?*・*foralltheprogramsundertherootdirectoryofthepartition(includingtheUdiskandothermobiledevices)EnvironmentalvariablesNote:xrepresentsthepartitionofthesystemdirectory%USERPROFILE%representsx:DocumentsandSettingsthecurrentu
8、sername%ALLUSERSPROFILE%meansC:DocumentsandSettingsAllUsers%APPDATA%representsx:DocumentsandSettingscurrentusernameApplicationData%ALLAPPDATA%representsx:DocumentsandSettingsAllUsersApplicationData%SYSTEMDRI
