WIN2K Checklist v2111 - Appendix B MSE安全攻防资料.doc

Appendix B - Information Assurance vulnerability Management (IAVM) NOTICE cOMPLIANCE IAVM Compliance The VCTS automatically sends out alerts that could affect critical systems. If appropriate actions are not taken, this could leave the systems open to a potential compromise. The platform must be checked to see if applicable IAVM Notices have been applied. Listed below are the procedures for checking for compliance of the IAVM Notices. Section 5.9.1 contains the requirements for Windows 2000 specific bulletins. Sections 5.9.2 thru 5.9.6 contains the requirements for service and application specific bulletins. The ( symbol indicates a check performed by the WinBatch scripts. NOTE: The vulnerabilities listed in Sections 5.9.1 are applicable to all systems (server or workstation) with Windows 2000 installed. The vulnerabilities listed in other sections are in addition to those identified in Sections 5.9.1.  Appendix B - Information Assurance vulnerability Management (IAVM) NOTICE cOMPLIANCE 1 5.9 IAVM Compliance 1 5.9.1 Implementing DOD-CERT Information Assurance Vulnerability Management (IAVM) Alerts, Bulletins and Tech Advisories - Windows 2000. 3 DOD-CERT IAVM Alerts (WinOS) - AntiVirus. 3 DOD-CERT IAVM Bulletins (WinOS) -AntiVirus. 3 DOD-CERT IAVM Technical Advisories (WinOS) - Antivirus. 4 DOD-CERT IAVM Alerts (WinOS) - Service Pack. 5 DOD-CERT IAVM Bulletins (WinOS) - Service Pack. 5 DOD-CERT IAVM Technical Advisories (WinOS) - Service Pack. 6 DOD-CERT IAVM Alerts (WinOS) - HotFixes. 7 DOD-CERT IAVM Bulletins (WinOS) - HotFixes. 8 DOD-CERT IAVM Technical Advisories (WINOS) - HotFixes. 9 5.9.2 Implementing DOD-CERT Information Assurance Vulnerability Management (IAVM) Alerts, Bulletins and Tech Advisories – Microsoft Applications 10 DOD-CERT IAVM Alerts – Microsoft Applications. 10 DOD-CERT IAVM Bulletins – Microsoft Applications. 12 DOD-CERT IAVM Technical Advisories - Microsoft Applications. 15 5.9.3 Implementing DOD-CERT Information Assuran