windows xp sp 2 白皮书.docVIP

Windows XP Service Pack 2 Overview White Paper Published: February 2004 For the latest information, please see /security ContentsAbstract 1 Introduction 2 New Security Challenges 2 A More Secure System 3 Easier Maintenance 4 Implications of the Improvements 5 Network protection 6 Windows Firewall 6 Remote Procedure Call (RPC) 8 Distributed Component Object Model (DCOM) 8 Alerter and Messenger services 9 Memory protection 10 Execution Protection (NX) 10 Sandboxing 10 Safer message handling 11 Attachment Execution Service (AES) 11 AES in Outlook Express and Windows Messenger 12 HTML content blocking in Outlook Express 12 More secure browsing 14 Improved computer maintenance 16 Windows Update 5 16 Windows Installer 3 16 Security Center 17 Summary 18 Glossary 19 Abstract Windows XP Service Pack 2 addresses new challenges to the security of personal computers by making a number of basic improvements to the operating system. It reduces common attack vectors four ways: it enhances protection of the network, increases protection for memory, handles e-mail more safely, and browses the Internet more securely. Service Pack 2 also makes it easier to keep the system up-to-date; makes it easier for an administrator to control security throughout an enterprise; and makes it easier to use Bluetooth devices from Windows. Service Pack 2 also includes DirectX 9 and Windows Media Player 9, which contain security, performance, and functionality improvements. Introduction Historically, operating systems have had to find a balance between ease of use and security. Early versions of Windows were designed primarily for ease of use, which was appropriate for computers used by one person, without any connection to the outside world beyond an occasional shared floppy diskette. For an isolated, single-user system, even requiring a username and password seemed unnecessary. Todays connected computing environment commonly exposes computers to a variety of security threats. The majority of compu