лабораторна робота № 3. Current Update Compliance. Update Rollups and Service Packs. Current Update Compliance

Стр 1 из 7Следующая ⇒

МІНІСТЕРСТВО ОСВІТИ І НАУКИ УКРАЇНИ

ЧЕРНІВЕЦЬКИЙ НАЦІОНАЛЬНИЙ УНІВЕРСИТЕТ

ІМЕНІ ЮРІЯ ФЕДЬКОВИЧА

Інститут фізико-технічних та комп’ютерних наук

Кафедра комп’ютерних систем та мереж

лабораторна робота № 3

Налаштування політики безпеки операційної системи Windows XP SP2.

Виконав:

студент 442ск групи

Грищук М. І.

Перевірила:

Кириченко О. Л.

Чернівці, 2015

1. Проскануйте комп’ютер за допомогою Microsoft Baseline Security Analyzer 2. 0. 1 та збережіть результати для порівняння.

	Security assessment:
	Severe Risk (One or more critical checks failed. )

Computer name:	LAB9\PC3
IP address:	10. 30. 9. 4
Security report name:	LAB9 - PC3 (20. 03. 2015 0-57)
Scan date:	20. 03. 2015 0: 57
Catalog synchronization date:
Security update catalog:	Microsoft Update

Security Updates

Score

Issue

Result

Office Security Updates

24 security updates are missing.

Security Updates
Score	ID	Description	Maximum Severity
Missing	MS10-039	Security Update for Microsoft Office InfoPath 2003 (KB980923)	Important
Missing	MS13-096	Security Update for Office 2003 (KB2850047)	Critical
Missing	MS10-063	Security Update for Microsoft Office 2003 (KB2288613)	Important
Missing	MS10-105	Security Update for Microsoft Office 2003 (KB2289163)	Important
Missing	MS08-041	Security Update for Access Snapshot Viewer 2003 (KB955439)	Critical
Missing	MS14-020	Security Update for Publisher 2003 (KB2878299)	Important
Missing	MS11-055	Security Update for Microsoft Office 2003 (KB2493523)	Important
Missing	MS13-073	Security Update for Excel 2003 (KB2810048)	Important
Missing	MS11-036	Security Update for Microsoft Office PowerPoint 2003 (KB2535812)	Important
Missing	MS13-078	Security Update for Office 2003 (KB2825621)	Important
Missing	MS13-091	Security Update for Office 2003 (KB2760494)	Important
Missing	MS08-011	Security Update for Microsoft Works Suite 2005 (KB943973)	Moderate
Missing	MS13-002	Security Update for Office 2003 (KB2760574)	Critical
Missing	MS13-072	Security Update for Office 2003 (KB2817474)	Important
Missing	MS09-043	Security Update for Microsoft Office Web Components (KB947319)	Critical
Missing	MS12-046	Security Update for Office 2003 (KB2687626)	Important
Missing	MS10-044	Security Update for Microsoft Office Access 2003 (KB981716)	Critical
Missing	MS09-060	Security Update for Microsoft Office 2003 (KB974554)	Important
Missing	MS09-073	Security Update for Microsoft Office 2003 (KB975051)	Important
Missing	MS13-054	Security Update for Office 2003 (KB2817480)	Important
Missing	MS10-045	Security Update for Microsoft Office Outlook 2003 (KB980373)	Important
Missing	MS14-017	Security Update for Word 2003 (KB2878303)	Critical
Missing	MS10-064	Security Update for Microsoft Office Outlook 2003 (KB2293428)	Important
Missing	MS12-060	Security Update for Office 2003 (KB2726929)	Critical
Current Update Compliance
Score	ID	Description	Maximum Severity
Installed		OneNote 2003 Service Pack 2
Installed		Office 2003 Service Pack 3 (SP3)
Installed		Project 2003 Service Pack 2

Windows Security Updates

31 security updates are missing. 3 service packs or update rollups are missing.

Security Updates
Score	ID	Description	Maximum Severity
Missing	MS14-002	Security Update for Windows XP (KB2914368)	Important
Missing	MS08-069	Security Update for Microsoft XML Core Services 4. 0 Service Pack 2 (KB954430)	Important
Missing	MS14-018	Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2936068)	Critical
Missing	MS14-011	Security Update for Windows XP (KB2909210)	Critical
Missing	MS13-029	Security Update for Windows XP (KB2813345)	Critical
Missing	MS13-081	Security Update for Windows XP (KB2862330)	Important
Missing	MS13-099	Security Update for Windows XP (KB2892075)	Critical
Missing	MS13-057	Security Update for Windows Media Format Runtime 9 for Windows XP (KB2803821)	Critical
Missing	MS13-098	Security Update for Windows XP (KB2893294)	Critical
Missing	MS13-033	Security Update for Windows XP (KB2820917)	Moderate
Missing	MS13-027	Security Update for Windows XP (KB2807986)	Important
Missing	MS13-063	Security Update for Windows XP (KB2859537)	Important
Missing	MS13-089	Security Update for Windows XP (KB2876331)	Critical
Missing	MS07-040	Security Update for Microsoft. NET Framework, Version 2. 0 (KB928365)	Critical
Missing	MS13-060	Security Update for Windows XP (KB2850869)	Critical
Missing		Security Update for Windows XP (KB2862152)
Missing	MS13-071	Security Update for Windows XP (KB2864063)	Important
Missing	MS14-015	Security Update for Windows XP (KB2930275)	Important
Missing	MS13-070	Security Update for Windows XP (KB2876217)	Critical
Missing	MS13-011	Security Update for Windows XP (KB2780091)	Critical
Missing	MS13-081	Security Update for Windows XP (KB2862335)	Important
Missing	MS14-013	Security Update for Windows XP (KB2929961)	Critical
Missing	MS13-102	Security Update for Windows XP (KB2898715)	Important
Missing	MS13-020	Security Update for Windows XP (KB2802968)	Critical
Missing	MS13-081	Security Update for Windows XP (KB2847311)	Critical
Missing	MS13-090	Cumulative Security Update for ActiveX Killbits for Windows XP (KB2900986)	Critical
Missing	MS14-021	Security Update for Internet Explorer 8 for Windows XP (KB2964358)	Critical
Missing	MS13-054	Security Update for Windows XP (KB2834886)	Critical
Missing	MS14-005	Security Update for Windows XP (KB2916036)	Important
Missing	MS14-019	Security Update for Windows XP (KB2922229)	Important
Missing	MS13-095	Security Update for Windows XP (KB2868626)	Important
Update Rollups and Service Packs
Score	ID	Description
Missing		Update for Windows XP (KB2904266)
Missing		Microsoft. NET Framework 3. 5 Service Pack 1 and. NET Framework 3. 5 Family Update for. NET versions 2. 0 through 3. 5 (KB951847) x86
Missing		Windows Malicious Software Removal Tool - March 2015 (KB890830)
Current Update Compliance
Score	ID	Description	Maximum Severity
Installed	MS10-084	Security Update for Windows XP (KB2360937)	Important
Installed	MS10-096	Security Update for Windows XP (KB2423089)	Important
Installed	MS12-005	Security Update for Windows XP (KB2584146)	Important
Installed	MS09-059	Security Update for Windows XP (KB975467)	Important
Installed	MS12-014	Security Update for Windows XP (KB2661637)	Important
Installed	MS11-062	Security Update for Windows XP (KB2566454)	Important
Installed	MS11-097	Security Update for Windows XP (KB2620712)	Important
Installed	MS09-010	Security Update for Windows XP (KB923561)	Important
Installed	MS11-011	Security Update for Windows XP (KB2393802)	Important
Installed	MS11-014	Security Update for Windows XP (KB2478960)	Important
Installed	MS10-055	Security Update for Windows XP (KB982665)	Critical
Installed	MS11-031	Security Update for Windows XP (KB2510531)	Critical
Installed	MS06-069	Security Update for Flash Player (KB923789)	Critical
Installed	MS12-034	Security Update for Windows XP (KB2676562)	Critical
Installed	MS11-030	Security Update for Windows XP (KB2509553)	Important
Installed	MS08-071	Security Update for Windows XP (KB956802)	Critical
Installed	MS11-090	Cumulative Security Update for ActiveX Killbits for Windows XP (KB2618451)	Critical
Installed	MS09-037	Security Update for Windows XP (KB973815)	Critical
Installed	MS09-013	Security Update for Windows XP (KB960803)	Critical
Installed	MS12-053	Security Update for Windows XP (KB2723135)	Critical
Installed	MS10-050	Security Update for Windows XP (KB981997)	Important
Installed	MS10-005	Security Update for Windows XP (KB978706)	Moderate
Installed	MS10-033	Security Update for Windows XP (KB979482)	Critical
Installed	MS12-072	Security Update for Windows XP (KB2727528)	Critical
Installed	MS10-019	Security Update for Windows XP (KB979309)	Critical
Installed	MS10-030	Security Update for Windows XP (KB978542)	Critical
Installed	MS12-054	Security Update for Windows XP (KB2705219)	Critical
Installed	MS11-092	Security Update for Windows XP (KB2619339)	Critical
Installed	MS12-045	Security Update for Windows XP (KB2698365)	Critical
Installed	MS10-013	Security Update for Windows XP (KB977914)	Critical
Installed	MS08-076	Security Update for Windows XP Service Pack 3 (KB952069)	Important
Installed	MS11-024	Security Update for Windows XP (KB2506212)	Important
Installed	MS09-069	Security Update for Windows XP (KB974392)	Important
Installed	MS12-024	Security Update for Windows XP (KB2653956)	Critical
Installed	MS11-020	Security Update for Windows XP (KB2508429)	Critical
Installed	MS11-002	Security Update for Windows XP (KB2419632)	Critical
Installed	MS09-037	Security Update for Windows XP Service Pack 3 (KB973540)	Critical
Installed	MS13-002	Security Update for Windows XP (KB2757638)	Critical
Installed	MS09-073	Security Update for Windows XP (KB973904)	Important
Installed	MS12-002	Security Update for Windows XP (KB2603381)	Important
Installed	MS10-033	Security Update for Windows Media Format Runtime 9, 9. 5 & 11 for Windows XP SP3 (KB978695)	Critical
Installed	MS10-063	Security Update for Windows XP (KB981322)	Critical
Installed	MS11-071	Security Update for Windows XP (KB2570947)	Important
Installed	MS08-036	Security Update for Windows XP (KB950762)	Important
Installed	MS10-026	Security Update for Windows XP (KB977816)	Critical
Installed	MS11-042	Security Update for Windows XP (KB2535512)	Critical
Installed	MS12-082	Security Update for Windows XP (KB2770660)	Important
Installed	MS09-037	Security Update for Windows XP (KB973507)	Critical
Installed	MS12-078	Security Update for Windows XP (KB2753842)	Critical
Installed	MS10-013	Security Update for Windows XP (KB975560)	Critical
Installed	MS11-080	Security Update for Windows XP (KB2592799)	Important
Installed	MS09-056	Security Update for Windows XP (KB974571)	Important
Installed	MS09-012	Security Update for Windows XP (KB952004)	Important
Installed	MS12-043	Security Update for Windows XP (KB2719985)	Critical
Installed	MS09-051	Security Update for Windows XP (KB975025)	Critical
Installed	MS09-037	Security Update for Windows XP (KB973869)	Critical
Installed	MS10-083	Security Update for Windows XP (KB979687)	Important
Installed	MS11-093	Security Update for Windows XP (KB2624667)	Important
Installed	MS11-006	Security Update for Windows XP (KB2483185)	Critical
Installed	MS09-046	Security Update for Windows XP (KB956844)	Critical
Installed	MS10-061	Security Update for Windows XP (KB2347290)	Critical
Installed	MS09-012	Security Update for Windows XP (KB956572)	Important
Installed	MS12-034	Security Update for Windows XP Embedded (KB2686509)	Important
Installed	MS09-052	Security Update for Windows XP (KB974112)	Critical
Installed	MS11-038	Security Update for Windows XP (KB2476490)	Critical
Installed	MS09-044	Security Update for Windows XP (KB956744)	Critical
Installed		Windows XP Service Pack 3 (KB936929)
Installed	MS10-001	Security Update for Windows XP (KB972270)	Low
Installed	MS11-056	Security Update for Windows XP (KB2507938)	Important
Installed	MS09-051	Security Update for Windows Media Format Runtime 9, 9. 5 & 11 for Windows XP SP 3 (KB954155)	Critical
Installed	MS10-029	Security Update for Windows XP (KB978338)	Moderate
Installed	MS09-041	Security Update for Windows XP (KB971657)	Important
Installed	MS10-076	Security Update for Windows XP (KB982132)	Critical
Installed	MS12-034	Security Update for Windows XP (KB2686509)	Important
Installed	MS10-099	Security Update for Windows XP (KB2440591)	Important
Installed	MS12-004	Security Update for Windows XP (KB2598479)	Critical
Installed	MS11-033	Security Update for Windows XP (KB2485663)	Important
Installed	MS10-007	Security Update for Windows XP (KB975713)	Critical
Installed	MS11-017	Security Update for Windows XP (KB2481109)	Important
Installed	MS08-049	Security Update for Windows XP (KB950974)	Important
Installed	MS10-042	Security Update for Windows XP (KB2229593)	Critical
Installed	MS12-068	Security Update for Windows XP (KB2724197)	Important
Installed	MS12-049	Security Update for Windows XP (KB2655992)	Important
Installed	MS10-097	Security Update for Windows XP (KB2443105)	Important
Installed	MS09-057	Security Update for Windows XP (KB969059)	Important
Installed	MS09-071	Security Update for Windows XP (KB974318)	Moderate
Installed	MS10-082	Security Update for Windows XP (KB2378111)	Important
Installed		Update for Windows XP (KB2779562)
Installed	MS10-062	Security Update for Windows XP (KB975558)	Critical
Installed	MS10-052	Security Update for Windows XP (KB2115168)	Critical
Installed	MS12-048	Security Update for Windows XP (KB2691442)	Important
Installed	MS10-081	Security Update for Windows XP (KB2296011)	Important
Installed	MS12-004	Security Update for Windows XP (KB2631813)	Critical
Installed	MS12-006	Security Update for Windows XP (KB2585542)	Important
Installed	MS12-078	Security Update for Windows XP (KB2779030)	Critical
Installed	MS12-003	Security Update for Windows XP (KB2646524)	Important
Installed	MS11-043	Security Update for Windows XP (KB2536276)	Critical
Installed	MS11-037	Security Update for Windows XP (KB2544893)	Important
Installed	MS12-081	Security Update for Windows XP (KB2758857)	Critical
Installed	MS11-013	Security Update for Windows XP (KB2478971)	Important
Installed	MS11-075	Security Update for Windows XP (KB2564958)	Important
Installed	MS12-034	Security Update for Windows XP (KB2659262)	Important
Installed	MS11-015	Security Update for Windows XP (KB2479943)	Critical
Installed		Internet Explorer 8 for Windows XP with Language Interface Pack
Installed	MS09-042	Security Update for Windows XP (KB960859)	Important
Installed	MS12-054	Security Update for Windows XP (KB2712808)	Critical
Installed	MS10-074	Security Update for Windows XP (KB2387149)	Moderate
Installed	MS08-050	Security Update for Windows XP (KB946648)	Important
Installed		Internet Explorer 8 for Windows XP
Installed	MS09-015	Security Update for Windows XP (KB959426)	Moderate
Installed	MS08-046	Security Update for Windows XP (KB952954)	Critical
Installed	MS08-030	Security Update for Windows XP (KB951376)	Critical

SQL Server Security Updates

No security updates are missing.

Current Update Compliance
Score	ID	Description	Maximum Severity
Installed	MS06-061	MSXML 6. 0 RTM Security Update (925673)	Critical

Windows Scan Results

Administrative Vulnerabilities

Score

Issue

Result

Automatic Updates

The Automatic Updates feature is disabled on this computer.

Incomplete Updates

A previous software update installation was not completed. You must restart your computer to finish the installation. If the incomplete installation was a security update, then the computer may be at risk until the computer is restarted.

Windows Firewall

Windows Firewall is enabled and has exceptions configured. Windows Firewall is enabled on all network connections.

Connection Name	Firewall	Exceptions
All Connections	On	Programs
Подключение по локальной сети	On	Programs*

Local Account Password Test

No user accounts have simple passwords.

User	Weak Password	Locked Out	Disabled
HelpAssistant	-	-	Disabled
SUPPORT_388945a0	-	-	Disabled
Гость	-	-	Disabled
Admin	-	-	-
Администратор	-	-	-

File System

All hard drives (2) are using the NTFS file system.

Drive Letter	File System
C:	NTFS
D:	NTFS

Guest Account

The Guest account is disabled on this computer.

Restrict Anonymous

Computer is properly restricting anonymous access.

Administrators

No more than 2 Administrators were found on this computer.

User

Admin

Администратор

Password Expiration

This check was skipped because the computer is not joined to a domain.

Autologon

This check was skipped because the computer is not joined to a domain.

Additional System Information

Score

Issue

Result

Windows Version

Computer is running Microsoft Windows XP.

Auditing

This check was skipped because the computer is not joined to a domain.

3 share(s) are present on your computer.

Share	Directory	Share ACL	Directory ACL
ADMIN$	C: \WINDOWS	Admin Share	BUILTIN\Пользователи - RX, BUILTIN\Опытные пользователи - RWXD, BUILTIN\Администраторы - F, NT AUTHORITY\SYSTEM - F
C$	C: \	Admin Share	BUILTIN\Администраторы - F, NT AUTHORITY\SYSTEM - F, BUILTIN\Пользователи - RX, Все - RX
D$	D: \	Admin Share	BUILTIN\Администраторы - F, NT AUTHORITY\SYSTEM - F, BUILTIN\Пользователи - RX, Все - RX

Services

Some potentially unnecessary services are installed.

Service	State
Telnet	Stopped

Internet Information Services (IIS) Scan Results

Score

Issue

Result

IIS Status

IIS is not running on this computer.

SQL Server Scan Results

Score

Issue

Result

SQL Server/MSDE Status

SQL Server and/or MSDE is not installed on this computer.

Desktop Application Scan Results

Administrative Vulnerabilities

Score

Issue

Result

IE Zones

Internet Explorer zones have secure settings for all users.

Macro Security

4 Microsoft Office product(s) are installed. No issues were found.

Issue	User	Advice
Microsoft Office Excel 2003	All Users	No security issues were found.
Microsoft Office Outlook 2003	All Users	No security issues were found.
Microsoft Office PowerPoint 2003	All Users	No security issues were found.
Microsoft Office Word 2003	All Users	No security issues were found.

2. Налаштуйте параметри безпеки операційної системи Вашого комп’ютера згідно з вимогами Нацбанку (за винятком пунктів, пов’язаних з модифікацією BIOS), які викладено у теоретичній частині.

3. Повторно проскануйте Ваш комп’ютер за допомогою LanSpy та Microsoft Baseline Security Analyzer 2. 0. 1 і порівняйте результати з попередніми, звернувши особливу увагу на ті пункти звіту, параметри яких налаштовувалися (Локальне группы, Удаленное управление, Настройки безопасности, Разделяемые ресурсы, Системне службы).

12 3 4 5 6 7 Следующая ⇒