Office Document security issues: Security level, digital signature, password settings, etc.

There are also security issues with documents, especially for Office documents, where Office provides more complete security and document protection features, including security levels, digital signatures, password settings, form protection, and annotation passwords, to make your documents more secure.

The security level of the document

The biggest security risk for Word documents is the macro virus, which prevents the concept of a security level from being created by the macro virus word. You can set it in the Security level tab of tools → options → security tab → macro security, which is divided into high, medium and low three. The high level will run only the trusted source macros, all other macros are canceled; medium level when you open a macro, you see a warning that lets you choose whether to enable it, and that the macro is not protected at a low level. Macros in installed templates and add-ins (including wizards) may be disabled when you select a high level. You only click the Trusted Sources tab in tools → options → security → macro security, and then tap the Trust all installed add-ins and templates check box to keep the installed macros from being disabled. Note: All templates, add-ins, and macros that follow Microsoft Office XP are digitally signed by Microsoft. Once you have added to your list of trusted sources for one of these installed files, the subsequent interaction with those files will no longer generate messages.

Protection of digital certificates

Many documents are from unknown sources, so security is not guaranteed. Office can use digital certificates to verify the reliability of the source. and digitally sign a file or macro with a digital certificate. In general, digital certificates are obtained from commercial certification authorities and internal security administrators or information technology professionals. Ordinary users can create digital signatures in person using the Selfcert.exe tool (because a digital certificate that you create with Selfcert.exe is not issued by a formal certification authority, a macro scheme that adds a signature using this certificate will be considered a self-signed scheme. This may not be possible for other users to run self-signed macros. Signing a macro with a digital certificate is simple: Open the file that contains the macro scheme you want to sign, and in the tools → macro →visual basic Editor → Project Explorer, select the scenario you want to sign. Then click the "tools → digital signature" command.

Tips:

1. Be sure to sign the macro after the macro test has been completed, because the code for the signed macro scheme is changed, and its digital signature is deleted. If it is a self-signed certificate, the macro scheme will be automatically re-signed each time you save it.

2. If you want to prevent a user from accidentally modifying a macro scheme and causing the signature to fail, lock the macro scheme before signing. Your digital signature only means that you guarantee that the scenario is safe and does not prove that you wrote the scenario. Therefore, locking a macro scheme does not prevent other users from replacing your digital signature with another signature.

3. If you create an add-in that can add code to a macro scenario, the code should determine the following: If the scheme has been digitally signed, notify the user to modify the results of the signature scheme before continuing with the operation.

Password settings for the file

Word's file password includes two types: Modify the permission password and open the permission password. Opening a password makes the Word document a read-only file, and if you open the document and make changes to it, you can save the document with a different file name. The password to modify permissions allows users to modify the save at will. How to: Open the file, in the tools → options → security tab in the password settings.

Tip: To create a long password, click Advanced, and then select the RC4 encryption type.

Prevent users from changing the form

Because some documents need to protect the form so that others can enter information only in the specified area. So Office provides the form protection feature. When you use the Form Protection feature, any information in the form field is reset. How to: "Tools → protect documents → forms." To assign a password to the form so that users who know the password can remove and modify the form, type the password in the password (not required) box. Users who do not know the password can still enter information in the form field. If you want to protect the entire form, click the OK button. To protect only part of a form, these parts must be in a different section, click Section, and then clear the check boxes for sections that you do not want to protect.

Annotation password Add

Annotations are important in a review, and office protects annotations in the tools → protection document. Just select the object you want to protect, and then type the password into the Password box to achieve protection.