Setting security functions in IE7.0 to prevent international domain name Spoofing

Unless you are isolated from the rest of the world, you must know that Internet Explorer 6 may be most famous for its many vulnerabilities. In fact, the entire Anti-Spyware industry is profitable by eliminating a large number of products caused by ie6.

From the day Microsoft developed Windows Vista, it has been declared that security is the most important goal for Windows Vista development. The key component of Windows Vista is Internet Explorer 7. Microsoft announced that Internet Explorer 7 is much more secure than IE6. Microsoft has released Internet Explorer 7 for Windows XP and Windows Server 2003. By using these IE7 versions and Windows Vista, we can see how IE7 enhances system security.

Configure IE7 to enhance Vista security

Step 1: General Security Configuration
Step 2: Filter the Phishing scam page (Phishing Filter)
Step 3: prevent international domain name and URL Spoofing
Step 4: Select opt-ins, Information bar, and cross-Origin Protection for ActiveX.
Step 5: Windows Vista and IE7
Step 3: prevent international domain name and URL Spoofing

In fact, you can fully consider that the security feature of preventing international domain name spoofing is an extension of the Phishing Filter function, but this function is automatically enabled, whether or not the Phishing Filter is in use. Preventing international domain name spoofing means that malicious websites always try to imitate well-known and legal websites. The most terrible thing is that a malicious website imitates a legitimate website URL. Some Elementary intruders always mimic and use the closest spelling of the legitimate website URL address. More often, experienced Intruders use the Foreign Language Character Set in URLs. This is because the characters in some foreign language character sets look the same as English letters, but they are different in computers. This method makes the URLs written by illegal intruders look exactly the same as those of valid websites.

To prevent such intrusion, when a URL address contains a mixed character set, Internet Explorer will remind you that such a URL address is often a malicious website or a misleading website. Once again, you do not need to enable this function; it is automatically enabled to prevent international domain name spoofing.

URL Spoofing

The new URL parser function is similar to a foreign language filter. In the past, attackers used to insert tiny code execution commands into URLs. This technology has several different changes, but the most popular technology is to put commands in a Long URL address. This technique causes the buffer value overload when the URL length is too long. If a command is in the proper position in the URL address, the command starts to be executed when the buffer value is overloaded.

This technology has been intercepted long ago, but its numerous deformation methods are still in use today. IE7 contains a new URL parser (URL parser) designed by Microsoft to check the URL address. before releasing the URL address to Internet Explorer, this parser performs a comprehensive check on the URL address.

The new URL parser (URL parser) is also a security feature enabled by default and does not need to be set.

Related Articles]

• Maintenance of Windows Vista System Security Information

• Filter phishing scam pages using the security setting function of IE7.0

• General Security Configuration for setting security functions in IE7.0