tailieunhanh - Seven Deadliest USB Attacks phần 9

Thực hiện Công nghệ Intel Trusted (TXT) được mô tả như là một tập của phần cứng được cải thiện thiết kế để hỗ trợ trong việc bảo vệ dữ liệu nhạy cảm dựa trên phần mềm Intel TXT bảo vệ sáu điểm trên một máy chủ / khách hàng: | Mitigating Measures 171 Drive Mapping Environments with this ability enabled allow users to transfer any data from client to server or vice versa. This opens the door for leakage scenarios and also provides the ability to upload malicious code unknowingly or intentionally. Windows Terminal Service is able to prevent local drive mapping on the target sessions. These settings can be adjusted by toggling the following GPO item. Computer Configuration Administrative Templates Windows Component Terminal ServiceSTerminal ServeADevice and Resource Redirection Citrix BlueCoat RA and Sun SGD are all able to modify this behavior. Due to resource testing limitations and version variance we will only include Windows-related corrective actions where applicable. Disabling Clipboard Pasting The copy and paste feature within windows can be very useful but it is also another vulnerable area. Administrators rely heavily on this feature to perform basic daily function so its removal will not come without a cost. Disabling this has the potential to decrease administrative efficiency increase outage times and limit troubleshooting which could be financially devastating depending on the circumstances involved. Administrators often make use of this feature to copy database query results logs for vendor troubleshooting or any number of normal tasks often considered mundane. A Windows Group Policy option is available for disabling clipboard redirection in Terminal Services. The location is provided below should you feel the need to exercise this option. Local Computer Policy Computer Configuration Administrative Templates Windows Components Terminal Services Client Server data redirection Do not allow clipboard redirection Disabling this entirely on the host system can be more difficult. There are a few third-party resources that provide free utilities that can govern this function. Prevent is a freeware application that will allow you to selectively customize the clipboard .