Windows NT Security Model and Its Applications

Qin Zheng,Wu Zhongfu,Liao Xiaofeng,Li Hua,Zou Jianjun,Wang Kang

2000-01-01

Abstract:In this paper, a model of Windows NT security is presented at first. Then, based on the model, some technical measures are suggested to improve Windows NT network security. These methods mentioned above are feasible and effective in practice.

What problem does this paper attempt to address?

Research on Information Security Model and Security System Design

黄益民,平玲娣,潘雪增

DOI: https://doi.org/10.3785/j.issn.1008-973x.2001.06.005

2001-01-01

Abstract:After study of existing security models; analysis of information flow model, Bell-LaPadula(BLP) access control model and Biba access control model; and collation and comparison of their advantages and disadvantages, an improved model is put forward that satisfies the actual demands of information security. An implementation strategy is put forward that ensures information security, reliability, practicality and compatibility in the designed security system. An implementation scheme of this security system and its components and functions is provided. This system combines the following functions: mandatory access contro1, privilege separation, security audit, identity authentication and self-protection. It achieves the level 3 of national information security standard and level B1 of TCSEC standard. It was implemented in the Windows NT and Linux operating system and has yielded good resultsin application.
Computer Network Security System Research

xue yong wan,liang zhang,wei xu,hong hui gong

DOI: https://doi.org/10.4028/www.scientific.net/AMM.599-601.1457

2014-01-01

Abstract:the computer network is widely applied to people's attention,computer network security is very important,we must take effective measures to ensure the security of computer network.This paper analyzes the implications of computer network security system and its security mechanism,and for the current network security should be involved in some of the elements is introduced.
Research on Computer Network Security Analysis Model

ZHANG Tao,HU Ming-zeng,YUN Xiao-chun,ZHANG Yong-zheng

DOI: https://doi.org/10.3321/j.issn:1000-436x.2005.12.017

2005-01-01

Abstract:The research of security analysis needed a systemic security analysis model that was from the system resource and security factor of computer network.For the classification,rate and the main threaten of the security requirement,system devices,access privilege,host connection relation and vulnerability were analyzed,and the computer network attack from the point of view that the attacker's objective was to get privilege escalation was described.The computer system security analysis by fault tree and the network system security analysis by attack graph use the security analysis model.
Model of Security Approach for Information System

GUO Jian-dong,QIN Zhi-guang,ZHENG Min

DOI: https://doi.org/10.3969/j.issn.1001-0548.2008.02.035

2008-01-01

Abstract:In order to construct a secure architecture which possesses enough strictness and practicability using mechanisms of password, log auditing, and authority, a model of security for information system including interface logic, business logic, and abnormal activity detection is proposed in this paper. The working flows and functions of main components of the model are described. At the same time the abnormal activities in an information system are analyzed, and the working methods of abnormal activities detector, a practical format of log data, and the protecting method of log file are introduced as well.
Modeling of Network Situation Awareness

Juan Wang,Zhi-Guang Qin,Li Ye,Jing Jin

DOI: https://doi.org/10.1109/icccas.2008.4657814

2008-01-01

Abstract:Network situation awareness (NSA) is a new idea of network security, it is different from normal network security technique for its visualization and high-level data management, transform the abstract data to knowledge that human can understand, help network manager to make decision. Present NSA model have some weakness donpsilat fit to network security. This paper promote a improve model of the NSA, add privacy-preserving module, richen the data source, visualization (integrate GIS technique) and projection technique of situation awareness to improve abilities of emergences respond, reduce losses of network attacks, reveal abnormally intrusions.
Towards Quantifying the (in)security of Networked Systems.

Xiaohu Li,T. Paul Parker,Shouhuai Xu

DOI: https://doi.org/10.1109/aina.2007.138

2007-01-01

Abstract:Traditional security analyses are often geared towards cryptographic primitives or protocols. Although such analyses are absolutely necessary, they do not provide much insight for answering an equally important question: what is the security assurance of a physically or logically networked system when we consider it as a whole? This question is known to be notoriously difficult, and the state-of-the-art is that we know very little about it. In this paper, we make a step towards resolving it with a new modeling approach.
Research for Network Security System Design

余冬梅,刘密霞,冯涛

DOI: https://doi.org/10.3969/j.issn.1673-629x.2004.02.041

2004-01-01

Abstract:The greater the availability of the network, the greater its vulnerability to threats from within and outside the organization. To an organization, an enterprise, constructing an appropriate network security system is very necessary. Based on a framework for network security system design put forwarded in, detailed analysis of the phase of network security design is made in this paper, and architecture model and policy management implemented model are given, which hangs security architecture, security policy implement and the enforced mechanism of network security together, and insures the transition between high-level security requirement analysis and the low-level system implementation smoothly.
A Framework Model Integrating Network Intrusion Detection Systems and Firewalls

Ke CHEN,Zhi-tang Li

DOI: https://doi.org/10.3969/j.issn.1007-130X.2001.02.007

2001-01-01

Abstract:At first,this paper analyzes the we aknesses of firewalls and network intrusion detection systems which are widely used today.Then,an integrated framework model is presented,and the security enhanc ement enabled by the integration is also discussed.Finally,this paper puts forwa rd suggestions on future work.
The Research of Network Security Technologies

Zhen Wang,Zhijie Liu,Xiaoyao Xie

DOI: https://doi.org/10.1109/icasid.2009.5277012

2009-01-01

Abstract:Based on this essay, we introduce the current network security technologies and problems. Also, we analyze the excellence and weakness of the firewall technologies, the intrusion detection and prevention technology in order to integrate the firewall technology and intrusion prevention technology, which can help to improve the real-time check, accuracy and recovery ability of the network security system.
Security Improvements and Defects of Windows 8

FU Zhuo-yi,WANG Yi-jun,XUE Zhi

DOI: https://doi.org/10.3969/j.issn.1009-8054.2013.11.012

2013-01-01

Abstract:Windows operating system is a widely-used operating system,and its security mechanism is always a hot research field.The latest Windows 8 has received great improvement in its security mechanism,and thus draws much attention from the people.The article,starting from the security of user mode,kernel mode and hardware layer,combs up and summarizes Windows 8's security improvement. On this basis,this article puts forward some bypass and defensive measures.Finally,it discusses the future rsearch direction.
Study and Improvement of MAC(Mandatory Access Control) for Windows

CHEN Hui,ZHOU Xue-Hai,CHEN Xiang-Lan

DOI: https://doi.org/10.3969/j.issn.1003-3254.2010.12.003

2010-01-01

Abstract:Security is always a hot topic with the development of computer technologies.Currently,mechanisms like active defense,detection and anti-detection are proposed.They could be implemented on different levels such as application-level and kernel-level in the system.We manage to go to the system-level.Linux owns mature security-enhanced version SELinux.For Windows,we focus on mandatory access control and propose a mechanism with improved efficiency,compatibility and stability.
Study on Evaluation for Security Situation of Networked Systems

Xiuzhen Chen,Qinghua Zheng,Xiaohong Guan,Chenguang Lin

DOI: https://doi.org/10.3321/j.issn:0253-987X.2004.04.019

2004-01-01

Abstract:Aiming at the deficiency that is unable to provide useful security situation information encountered in the cur2 rent security evaluation systems , a hierarchical and quantitative model , which is used to evaluate security situation of net2 worked systems , and its corresponding computation method are proposed based on the importance of service , host , and the structure of the network system. This model adopts the evaluation policy from bottom to top and from local to global , calculates the risk indexes of service , host and whole network system by weighting the importance of service and host based on the analysis of attack frequency and its severity , and further evaluates their security situation. Experiments on the HoneyNet dataset show that this system can evaluate the security situation in three levels : service , host and local area network system. It provides system administrators with system intuitive security situation curve and releases them from the exhausting task of alert analysis.
A Framework and It's Application for Security Architecture of Computer Networks

Haixin Duan,Jianping Wu

DOI: https://doi.org/10.3321/j.issn:1002-8331.2000.05.008

2000-01-01

Abstract:The definitions of some concepts related to security architecture for computer networks are presented firstly in this paper, and then, a framework is proposed from the aspect of security requirements. Based on the analysis of dependence among security services, a method is presented for classifying and rating network security according to se curity services and mechanisms. After the analysis of security mechanisms in TCP/IP protocol including IPSec and SSL, a protocol layered entity model is presented for implementation of security services and security management. From the aspect of entity unit, all kinds of security technologies are organized into to four layers. The place of security management in the architecture and content of management activities for large networks are described. At the end of this paper, further research directions are pointed about the security architecture.
Secure Network Component Architecture Model

Zhou Yi,Li Ying,Li Yang,Wu Zhaohui

DOI: https://doi.org/10.1109/icnsc.2006.1673131

2006-01-01

Abstract:In the Internet computing environment, clients usually invoke remote components to accomplish computation. As a result, many security problems are raised. Traditional network component architecture model focuses on business logic. It takes into little consideration the security problems when business logic is invoked. This paper proposes secure network component architecture model (SNCAM) to address them. It classifies clients according to their credibility levels on the component side. Next, we discuss the main idea of this paper, which is the security domain. To reduce the overhead introduced by the security mechanisms, a method called security agent is proposed. Finally, it quantitatively determines the performance cost introduced by the security mechanisms, and when to use the security agent
Computer Security Models Survey

Dong-hui HU,Xue-hai ZHOU

DOI: https://doi.org/10.3969/j.issn.1000-1220.2005.04.001

2005-01-01

Abstract:Security model, which guides the construction and evaluation of security system, is the representation of security policies. Several security models are first reviewed and analyzed on the basis of the introduction to the concepts of basic model, classical model and multi-policy model. Some of those are compared emphatically. The paper is concluded with the future research on security model.
Design and Implementation of LAN Data Security System Based on Trusted Network Connection

LIU Sheng-li,WANG Wen-bing,FEI Jin-long,ZHu Yue-fei

DOI: https://doi.org/10.3969/j.issn.1671-0673.2010.01.019

2010-01-01

Abstract:This paper designs and realizes a data security system for LAN based on Trusted Network Connection(TNC) Specifications.According to TNC mechanism,the new system enforces the network access control method and employs the file system filter driver to monitor and protect sensitive data.In terms of these means,the system can prevent sensitive data from being divulged or stolen and to implement all the files are controlled into the trusted network environment.
Exploring Computer Information Security Technology and Protection Methods

Huahui Lv,Zhe Ming,Aidong Xu,Hang Yang

DOI: https://doi.org/10.1109/CISCE.2019.00100

2019-07-05

Abstract:Social development has driven the rapid development of computer technology and networks and computers and networks have become "universal" from "rare". But the security instability that followed has also become a major problem in testing individuals and society. Therefore, in the fast and stable establishment of the computer system, how to improve the computer security defense capability has become a difficult problem that we urgently need to study and explore. This paper first analyzes the basic concepts of information security, refines related issues and puts forward suggestions on how to prevent and measure methods based on actual conditions, hoping to help the governance business.

Computer Science
A New Approach to Modeling and Analyzing Security of Networked Systems

Gaofeng Da,Maochao Xu,Shouhuai Xu

DOI: https://doi.org/10.1145/2600176.2600184

2016-01-01

Abstract:Modeling and analyzing security of networked systems is an important problem in the emerging Science of Security and has been under active investigation. In this paper, we propose a new approach towards tackling the problem. Our approach is inspired by the shock model and random environment techniques in the Theory of Reliability, while accommodating security ingredients. To the best of our knowledge, our model is the first that can accommodate a certain degree of adaptiveness of attacks , which substantially weakens the often-made independence and exponential attack inter-arrival time assumptions. The approach leads to a stochastic process model with two security metrics, and we attain some analytic results in terms of the security metrics.
Security Improvement Scheme of RDP Protocol

YU Sheng-Sheng,CAI Long-zheng,Zhou Jing-li,OuYang Kai,MA Duo-duo,ZENG Hai-peng

DOI: https://doi.org/10.3969/j.issn.1000-1220.2005.09.002

2005-01-01

Abstract:Windows server is one kind of the most widely used servers nowadays. And there are plenty of scenarios that people needs to access it from remote locations, especially through Internet. To satisfy these needs, Microsoft defined Remote Desktop Protocol (RDP). In this paper, the security characteristics of RDP and some of its implementations are analyzed. Based on that, a security-enhanced approach, which integrating the implementation of SSL (TLS) and RDP, is proposed and implemented.
The Inner Workings of Windows Security

Ashvini A Kulshrestha,Guanqun Song,Ting Zhu

DOI: https://doi.org/10.48550/arXiv.2312.15150

2023-12-23

Abstract:The year 2022 saw a significant increase in Microsoft vulnerabilities, reaching an all-time high in the past decade. With new vulnerabilities constantly emerging, there is an urgent need for proactive approaches to harden systems and protect them from potential cyber threats. This project aims to investigate the vulnerabilities of the Windows Operating System and explore the effectiveness of key security features such as BitLocker, Microsoft Defender, and Windows Firewall in addressing these threats. To achieve this, various security threats are simulated in controlled environments using coded examples, allowing for a thorough evaluation of the security solutions' effectiveness. Based on the results, this study will provide recommendations for mitigation strategies to enhance system security and strengthen the protection provided by Windows security features. By identifying potential weaknesses and areas of improvement in the Windows security infrastructure, this project will contribute to the development of more robust and resilient security solutions that can better safeguard systems against emerging cyber threats.

Cryptography and Security

Windows NT Security Model and Its Applications

Research on Information Security Model and Security System Design

Computer Network Security System Research

Research on Computer Network Security Analysis Model

Model of Security Approach for Information System

Modeling of Network Situation Awareness

Towards Quantifying the (in)security of Networked Systems.

Research for Network Security System Design

A Framework Model Integrating Network Intrusion Detection Systems and Firewalls

The Research of Network Security Technologies

Security Improvements and Defects of Windows 8

Study and Improvement of MAC(Mandatory Access Control) for Windows

Study on Evaluation for Security Situation of Networked Systems

A Framework and It's Application for Security Architecture of Computer Networks

Secure Network Component Architecture Model

Computer Security Models Survey

Design and Implementation of LAN Data Security System Based on Trusted Network Connection

Exploring Computer Information Security Technology and Protection Methods

A New Approach to Modeling and Analyzing Security of Networked Systems

Security Improvement Scheme of RDP Protocol

The Inner Workings of Windows Security