微淘公众平台推广营销方法详解.pptVIP

Securing Windows Networks Agenda Revealing Hacker Personas Top Security Mistakes Everyone Seems To Make Securing Windows Networks Staying Secure Secure Windows Initiative Security Improvements in XP Service Pack 2 Revealing Hacker Personas Overview – Revealing Hackers Personas Automated vs. Targeted Attacks Revealing Hacker Personas Lame Skilled Sophisticated Why YOU Were Selected and How You Got 0wn3d Hacker Personas Automated Attacks “Spreaders” or “Scan’n Sploit Tools” or “auto-rooters” Worms That Drop Bots or Trojans Targeted Attacks 0-day Exploits Custom Attacks that Exploit Weakness of Your Internet Presence Hacker Personas Lame - ~75% of all intrusions Motive: Wants your storage and bandwidth Method: Use of spreaders, bots, well known exploits Abilities: Limited high level language ability Payload: Usually FTP servers, backdoors disguised as a ‘clever’ service name “TCP/IP” service or “System Security” service “Microsoft ISA Server Common Files” service Hacker Personas Skilled - ~24% of all intrusions? Motive: Wants to explore your network and use your storage and bandwidth, wants to avoid discovery as much as possible. Method: Customized intrusion based on identified vulnerabilities for multiple operating systems or applications Abilities: Advanced HLL, some ASM Payload: FTP servers, keyloggers, backdoors, sniffers, password dumpers Hacker Personas Sophisticated - 1% of all intrusions? Motive: Wants your money or your secret / confidential data Method: Can customize intrusion based on any number of identified vulnerabilities for a variety of operating systems and applications, possibly using 0-day exploits Abilities: Advanced HLL, Advanced ASM Payload: Rootkits, a single backdoor DLL, extortion letter! Hacker Personas Why you were selected and how you got 0wn3d . . . Odds are great you were 0wn3d by a lamer You were easily identified as a Windows host through a simple port-scan (no firewall) You are on a big fat pipe (possibly hosted) You hav