tailieunhanh - Microsoft Office 97 Executable Content Security Risks and Countermeasures

This paper provides an analysis of each application, including techniques for embedding executable content or mobile code within each application. Each analysis summarizes the executable content threat, provides examples of embedding executable content within each application, and outlines possible countermeasures to protect the user against executable content attacks. | Report C4-072R-99 Date 20 Dec 1999 Version Microsoft Office 97 Executable Content Security Risks and Countermeasures Architectures and Applications Division of the Systems and Network Attack Center SNAC Author s Rhonda Breon C43 Ken Katano C42 Released By Curt Dukes Chief C43 National Security Agency ATTN C43 9800 Savage Rd. STE 6704 Ft. Meade MD 20755-6704 W2KGuides@ UNCLASSIFIED Microsoft Office 97 Executable Content Security Risks and Countermeasures ABSTRACT Office 97 is a popular software package of office applications developed by Microsoft that includes Word Excel Access PowerPoint and Outlook. Each of these applications includes a programming language for customization of their features. This paper provides an analysis of each application including techniques for embedding executable content or mobile code within each application. Each analysis summarizes the executable content threat provides examples of embedding executable content within each application and outlines possible countermeasures to protect the user against executable content attacks. Microsoft Office 97 Executable Content Security Risks and Countermeasures December 20 1999 UNCLASSIFIED Table of Contents Threat of Example s .5 Summary of Threat Potential. 10 Examples . 11 Countermeasures . 13 Summary of Excel. 14 Access. 14 Overview. 14 Threat Potential. 14 Examples . 15 Countermeasures . 15 Summary of Access. 18 Overview. 18 Threat Potential. 18 . 20 . 21 Controls Programs Macros from Action and Go Examples .