Eicon Networks S92 Instrukcja Użytkownika Pobierz pdf (Strona 45)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 45

enhancedsecurityagainst"passwordguessing" or "dictionaryattacks"byoutside

intruders.…The Passfilt.dllfileimplementsthefollowingpasswordpolicy:

n Passwordsmustbeatleastsix(6)characterslong.

n Passwordsmustcontaincharactersfromatleastthree(3)ofthefollowingfour

(4)classes:

1. Englishuppercaseletters              A,B,C,...Z

2. Englishlowercaseletters              a,b,c,...z

3. WesternizedArabicnumerals             0,1,2,...9

4. Nonalphanumeric("specialcharacters")suchaspunctuationsymbols

n Passwordsmaynotcontainyourusernameoranypartofyourfullname.

TheserequirementsarehardcodedinthePassfilt.dllfileandcannotbechanged

throughtheuserinterfaceorregistry.Ifyouwishtoraise orlowertheserequirements,

youmustwriteyourown.dllandimplementitinthesamefashionastheMicrosoft

versionthatisavailablewithWindowsNT4.0ServicePack2.”

10

Anidealauditpolicyshouldincludetheelementsbelow:

n AuditaccountmanagementSuccess:Failure

n AuditlogoneventsSuccess:Failure

n Auditobjectaccess:Failure

n AuditpolicychangeSuccess:Failure

n Auditprivilegeuse:Failure

n Auditprocesstracking:Noauditing

n AuditsystemeventsSuccess:Failure

Additionally,removeanyunnecessaryuseraccounts.Intheory,asingleuseraccount

fortheadministratorissufficient.Renamethisaccounttosomethinghardtoguess.

Thoroughlycheckthesystem’spermissionsettingsandensurethatnooneelseexcept

therenamedadministratorcanhaveaccess.

FINALLY,donotforgettotightenthefilesystemACLsettings.Thepolicyfilesand

thelogfilesshouldnotbeaccessibletothegeneralusersoranyunauthorizedservice.

10

http://support.microsoft.com/default.aspx?scid=kb;ENUS;q161990

1 2 ... 40 41 42 43 44 45 46 47 48 49 50 ... 208 209

Brak uwag

Eicon Networks S92 Instrukcja Użytkownika Strona 45