黑客攻教材资料击iis的主要发式演示跟安全防范措施.pptVIP

TechEd 2002 黑客攻击IIS的主要发式演示及安全防范措施 胡 雪美国微软公司顾问咨询部 高级顾问 日程： 怎样黑的: The Internet Information Server (IIS) Unicode exploit 为什么有Code Red 和 Nimda? 微软的应对措施： STPP New security features in IIS 6.0 怎样加固 IIS? 网络管理员 程序开发员 How It WorksCanonicalization A rose Windows 2000 是一个安全的平台吗？ 是的！ YES! Security is built-in Winner of eWeek OpenHack challenge Customers who survived Code Red and Nimda Current on service packs and security patches “Locked down” systems so that vulnerabilities were not exposed Withstand attacks even without applying patches Did both for “defense in depth” Microsoft’s commitment