PROSPECTIVE PROTECTION METHODS OF WINDOWS OPERATION SYSTEM
DOI:
https://doi.org/10.28925/2663-4023.2020.8.124134Keywords:
Windows; Operating System; vulnerabilities; protection; Active Directory; BlockchainAbstract
The article deals with the problem of ensuring information security of the Windows operating system and identifying promising security methods. This article identifies that the basic approach to operating system security is the "hardening of the operating system" process. The study presents statistics on the distribution of popular operating systems, namely Windows, Mac, Linux, Chrome, BSD. The analysis and classification of modern vulnerabilities of the operating system is made and the consequences of their action are given in the examples. These deficiencies can cause a computer system to intentionally violate the confidentiality, integrity and accessibility of information and the system as a whole. Based on the vulnerability analysis, the basic approaches and methods for the organization of protection of the operating system are determined. Standard approaches are discussed, namely the use of built-in security software, Active Directory security, and virtualization to deter attacks. Today, much attention is paid to cryptography and the principles of network, system, organizational and operational security, including risk analysis and disaster recovery, to ensure the security of the operating system. These approaches are basic and are a component of security in today's operating systems, but nowadays, using integrated approaches is more effective. A quick response to the violation of the integrity and accessibility of the operating system in combination with quenching, here are the main directions of development and improvement of the operating system. A rather new approach proposed in the article to protect Windows products is to use the Blockchain direction. It is currently used to validate digital certificates and can be said to have potential in other areas of operating system security. This paper shows examples of Blockchain implementation for certificate validation, taking into account some of the variations of validation. The examples are implemented in Python 3.0. The research of prospective methods and remedies of the operating system conducted in the article suggests that the use of system hardening is one of the effective and comprehensive approaches to providing security information, which will allow timely detection of vulnerabilities and timely response to violations of the basic properties of the operating system.
Downloads
References
Microsoft Advices [Online]. Available: https://www.cnews.ru/news/top/2020-0113_microsoft_predlozhila_400_mln_polzovatelej [Accessed: 10 march 2020]. (in Russian).
Tannenbaum, E. Modern Operating Systems. SPb. : Peter, 1040 p., 2006. (in Russian).
Derrick Rountree, Security for Microsoft Windows System Administrators Introduction to Key Information Security Concepts, Syngress, 211 р.,2011. (in English).
Artes, N.O., and S.M. Elsakov. “Protection System of Applications on ‘Windows’ Platform on the Basis of Activity Profile.” Journal of Computational and Engineering Mathematics 3, no. 3 (2016): 3–9. https://doi.org/10.14529/jcem160301. (in English).
HU, Hong-yin, Feng YAO, and Cheng-wan HE. “Solution of Windows Files Security Protection Based on File System Filter Driver.” Journal of Computer Applications 29, no. 1 (June 25, 2009): 168–171. https://doi.org/10.3724/sp.j.1087.2009.00168. (in English).
Küenzlen, Jürgen, Eckehard Scheller, and Hermann Hamm. “Fixing of Windows with Fall Protection / Befestigung von Absturzsichernden Fensterelementen.” Mauerwerk 20, no. 6 (December 2016): 423–444. https://doi.org/10.1002/dama.201600714. (in English).
Gordeev, A.V. Operating Systems: A Textbook for High Schools, Peter, 416 pp., 2008. (in Russian).
Proskurin, V.G. Protection in operating systems, M.: Radio and communications, 192 p., 2014. (in Russian).
CVE ID [Online]. Available: https://nvd.nist.gov/vuln/detail/CVE-2020-060 [Accessed: 10 march 2020]. (in English).
CVE-2020-0609 [Online]. – Available: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0609 [Accessed: 10 march 2020]. (in English).
CVE-2020-0610 Detail [Online]. – Available: https://nvd.nist.gov/vuln/detail/CVE-2020-0610 [Accessed: 10 march 2020]. (in English).
CVE-2020-0611 Detail [Online]. – Available: https://nvd.nist.gov/vuln/detail/CVE-2020-0611 [Accessed: 10 march 2020]. (in English).
Daytel, H.M. Operating Systems. Part 2: Distributed systems, networks, security, Moscow: Binom, 704 p., 2006. (in Russian).
Daytel, H.M. Operating Systems. Part 1: Fundamentals and principles, Moscow: Binom, 1024 p., 2007. (in Russian).
J.Spealman, K.Hudson, M.Graft, Windows Server 2003: Active Directory Infrastructure. Microsoft Press, pp. 1–8–1–9, 2003. (in English).
Berkouwer, Sander. Active Directory Administration,Veeam Software,620 p.,2019. (in English).
Edge, Charles S., Jr; Smith, Zack; Hunter, Beau. Enterprise Mac Administrator's Guide. Chapter 3: Active Directory, New York City: Apress, 618 p., 2009. (in English).
Endpoint data loss protection [Online]. – Available: https://docs.microsoft.com/ru-ru/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-overview [Accessed: 10 march 2020]. (in Russian).
Protection by service "Windows Security" [Online]. – Available: https://support.microsoft.com/uk-ua/help/4013263/windows-10-stay-protected-with-windows-security [Accessed: 10 march 2020]. (in Russian).
Microsoft Defender ATP Advanced Threat Protection [Online]. – Available: http://www.tadviser.ru/index.php/%D0%9F%D1%80%D0%BE%D0% B4%D1%83%D0%BA%D1%82:Microsoft_Defender_ATP_Advanced_Threat_Protection [Accessed: 10 march 2020]. (in English).
Bitcoin security guarantee shattered by anonymous miner with 51 % network power [Online]. – Available: https://arstechnica.com/information-technology/2014/06/bitcoin-security-guarantee-shattered-by-anonymous-miner-with-51-network-power/ [Accessed: 10 march 2020]. (in English).
