Windows Vista System Integrity Technologies.pptVIP

Refactoring IE LP IE IEUser IL=high if adminIL=medium otherwise LP IE Internet ZoneIL=low Intranet/Trusted ZoneIL=mediumSeparate TIF IEPolicy IL=high Again: the principle of least privilege Refactoring at the process level—more efficient and less expensive than a virtual machine Components and zones Operation Requirements Process URL navigation and HTML rendering Least privilegeLow integrity LP IE Managing user-controlled settings Least privilegeMedium integrity IEUser Enforcing policy in downloaded codeInitiating execution Full privilegeHigh integrity IEPolicy(service) Operation LP