Computer security Management (note)

I. DDoS attack targets:

1. Program Vulnerability (overflow) sensitive information disclosure, application bug

2. Use a weak password.

3. Database (column directory, differential backup, log backup, stored procedure)

4. System permissions configuration (run, upload, write)

5.IIS settings (script execution permissions)

6.FTP settings

7.ARP

1. Limit the number of consecutive password errors.

2. Split administrator privileges to cancel the hyper-pipe.

3. Remove the service ports that you do not need.

4. To close a service port that is not needed

5. Restrict permissions for remote logins.

6. View the server Event Viewer frequently.

2. The system disk and site settings must be formatted in NTFS for easy setting of permissions.

4. For the system disk and the site placement disk, the Aministrators and system user rights are cleared.

6. Enable Windows to bring your own firewall, leaving only the service ports that you need.

8. Rename administrator, create admin account, as a trap account, set an extra long password, not belong to any group, and disable the guest user.

10. Gpedit.msc account Policy, three login invalid, lockout time 30 minutes, reset lock count is set to 30 minutes.

12. Security Policy: Anonymous access to the share, anonymous access to the named channel, remote access to the registry path;

    The remote Access registry path and Subpath are empty.

14. Deny login via Terminal Services.

    Account: ASPNET guest iuser_*** iwam_***, NETWORK Sqldebgger

16. Audit Policies: Account management, account login events, login events, system events, policy changes (success, failure)

    Directory service access, object access, privileged use (failed)

18. Windows Redgistry v5.00 turn off the default share to prevent a null password or weak password intrusion

    Hkey_local_machine\system\current Contorl Set\services\lanmanserver\parameters

    autoshareserver=dword:000000000

    autosharewks=dw:00000000

20. Web server

    Build Web user password, belong to Guset Group

    IIS is placed on other disk directories for Web user access, network authentication.

    Execute Permissions: Pure script

22. To modify the log directory method:

    Regedit:hkey_local_machine/system/current Control Set/services/evertlog

    File D:\cee----d:ceeappevent.evt

Computer security Management (note)