Share it !
Windows Security Vulnerability is the bug appearing during the concrete function of the hardware, software and Agreement, or in the system security policy, which enable the attackers to unauthorizedly access or damage the system. Let's take some examples, such as the logic errors existing in Intel Pentium chip, the programming errors in the earlier version of Sendmail, the weaknesses in the authentication way of NFS Agreement, the problem of Unix system administrator setting anonymous FTP service without correct configuration, etc. All these errors or problems are likely taken advantage by attackers and threaten the system security, so that they can be considered as system security vulnerability.
Relation and time-related features between security vulnerability and specific system environment:
1. Windows vulnerability may have impact on a large number of software or hardware devices, including the system itself and its built-in software, Network client and server software, network routers, and security firewall, etc. In other words, between different versions of different software and hardware devices or the same device, different systems composed by different devices, as well as different configurations in the same system, various security vulnerability problems exist.
2. The security vulnerability problem is closely connected with time. A system from the day of release, as it is used in depth, will have vulnerabilities exposed gradually. The previous found vulnerabilities can be repaired constantly by the patches released by the system suppliers, or will be corrected in the new version of the system released later. However, a new version of the system that has corrected the vulnerabilities in the old system will also bring in some new security vulnerabilities and errors. Therefore, as time goes by, the old vulnerabilities continue to disappear, and the new will continue to appear. The vulnerabilities will exist for a long term.
How to fix security vulnerability to protect our computers?
1. Manual Repair
Pay timely attention to the latest patches released monthly on Microsoft's official website. Then click to download and install. Flow the prompt message to restart up your computer, after which the vulnerabilities on you computer system will be repaired with the latest patches.
2. Software Repair
It is a little bit troublesome to manually repair your system vulnerabilities, so we can rely on the vulnerability repair expert Spyware Cease. This software not only can scan the security vulnerabilities on your system in time, but also help pay attention to the information about Microsoft's patches regularly. In this way, you can operate your computer freely and easily.
From the description above, hope you can know more about Windows security vulnerability which is important in our daily computer use. As long as you keep this essential knowledge in mind, you will be always able to have a safe and fast Windows operating system.
http://www.bestspywarescanner.net/
Amy Zhou is a professional computer technician and virus threat analyst that contributes to the security software company. She is also a security software expert who is fond of reviews many antispyware and antivirus software in the market. She would like to help computer users to know more and take good care of their daily friend-the computers. Read more http://www.bestspywarescanner.net/
Not everyone in this world is as computer savvy as we would like to be and many are afraid to ask about computer technology out of sheer embarrassment. Well, if you are unclear about what the deal is with Ad-Hoc mode in windows is, search no further. This article will break down for you what Ad-Hoc is, why it was created, the differences between XP/Vista ad hoc modes and how to use it.
What is Windows Ad-Hoc mode?
Ad-Hoc is the ability to connect from one computer (or mobile device) to another without having to by pass an access point. These access points are like wireless networks that you log into and that secure the network for you. Ad-Hoc technology should only be used with people that you know and that there is a certain reason why you are using it. Such as passing documents off from one computer to another. Once you are done, you should disable the feature, which is discussed later in the article.
If you need to send applications, photos, music, movies, documents, software, etc. to another person, you can do it from a direct connect from one computer to another without having to go through a service provider. This is great in times that the internet is not functioning well and you have the two computers in relatively close distances.
Why does Ad-Hoc exist?
Ad-Hoc is ideal, especially between colleagues and students, who want to share files. With Ad Hoc technology, you are able to connect directly to another computer without an intermediate party. However, if you are not very technologically adept, it is safer to have your computer working through an access point because it is more secure. Computers often can have information stolen or corrupted by using an Ad-Hoc source.
Differences between Ad-Hoc in Windows XP and Windows Vista
There is not really any difference between Ad-Hoc in these two systems. Ad-hoc is available in both systems and they are compatible with each other. For example, a computer running on Windows XP is able to be part of the ad hoc network of a user that has a computer running on Windows Vista and vice versa. It seems that Windows XP can control pop ups from ad hoc networks that are in range where as Windows Vista likes to give its user the option that an ad hoc system is around you even though you have disabled the technology. In terms of use, it is used exactly the same in the two Windows applications and has the same sending capabilities (applications, photos, music, movies, documents, software, etc). The only difference may be how to get navigate to your wireless adapter. However, after finding the wireless adapter, the options and directions to enable and disable the Ad hoc networking system in your Window's computer should be exactly the same.
Using Ad-Hoc
Configuring the Ad-Hoc system on Windows XP can be relatively simple and problem free. You can have up to nine people who are on your as- hoc network but you will be limited by distance since this wireless technology does not reach very far. First, go to the wireless adapter and click on the properties tab which will prompt you to click on the wireless networks tab. Then you click on configure my wireless network settings. Then once you see Advanced options, click on that. Here you will be able to enable the computer to computer option also known as ad hoc. To add ad hoc networks, click the close button and then Windows will ask you which sites you would like to add to your ad hoc network. Click on the network and then click on add. Then you will have the further option of enabling and disabling this feature.
To disfigure the connection, you follow the same steps but when it asks if you want to connect to an ad hoc system, simply unclick that option and you will have disabled the feature. Make sure to disable the networks that you added to your ad hoc network.
Ad hoc is an excellent option for those who need to send documents or applications quickly and in a limited range such as in an office building floor, a house or classroom. The use of Ad hoc can be hazardous to your computer if you always keep it configured, so try to disable it after using it. Ad hoc is not necessary because you can use your wireless adapter to commit the same work of sending applications and receiving them as well, yet sometimes it proves to be faster just using direct computer to computer technology.
Security is key. Only join ad hoc networks where you are a friend, colleague or family member of people you know. Therefore, none of your documents will be compromised. Many times using ad hoc is looked down upon in, especially in business because employees by pass all of the security measures. However, on the other side of the coin, those who are paranoid about the government or employer snooping through private documents, there is not much they can do in regards to the ad hoc system.
Ad hoc is not very difficult to use so you should not be deterred by it. Play around with it for a while. If it benefits your style and makes the world a bit less complicated, then go for it. If it is a pain, then dimply disconnect it and you will never have to deal with it again. At least now you know what ad hoc is, why it was created, the differences between the ad hoc system in the Windows XP and the Windows Vista versions (or lack there of) and how to enable and disable your ad hoc networking system. Piece of cake, right?
Best Rated Laptops Security Guide
Laptop security, everything you need to know to protect your property, personal data and identity.
http://www.best-rated-laptops-guide.com/laptop_security.html
DNS- At the Heart of the Internet
It is safe to say that without the Domain Name System (DNS), the Internet would not be the force it is today.
In the early days of the Internet, users trying to reach another host on the network were required to input lengthy IP number strings (e.g., 74.125.45.105- a listed IP address for Google). As the internet grew number strings became more cumbersome and unworkable as most users could not consistently remember the proper sequencing of random numbers.
To simplify this process, a solution was developed based on a data solution (flat file) that related each IP address to a comparatively easy-to-remember common language address (e.g., Amazon.com, U-Tube.com, and Twitter.com) that was easy to remember and provided ease of use.
By the late 1980s, the flat file had evolved to the Domain Name System (DNS) in use today-a system that is open, distributed, and expands as users, enterprises, Internet Service Providers (ISPs) and domains appear on the network. Ease of use and expandability was the goal but, since cyber security attacks and malware were virtually unknown, DNS security was not a priority.
DNS is very effective and works in the background of search activity. Internet users are assured that when they type in a URL or e-mail address, they will be connected to the correct Web site or e-mail box. Many commercial companies developed brand strategies based on this functionality in order to use the Internet's reach to develop more customers and increase sales/revenue. Most of these companies adopted a.com or.net extension. The Federal government adopted a.gov or.mil extension.
DNS Brand Implications
The functionality of DNS opened the branding world to the Internet. Common names became commonplace brands (e.g. Google, Bing, Amazon, and E-Bay) and powerful strategies were developed to market brands on the Internet.
An entirely new marketing strategy called Search Engine Marketing (SEM) developed whereby keyword searches and positioning on search pages developed into a major industry. Premier placing on the first page of a search engine gave the recipient an advantage for more business versus the competition.
Google became a multi-billion dollar concern by developing algorithms that enabled effective and powerful key word searches. Web based purchases supported by easy, convenient key word searches now account for 20-30% of all retail business and the web based e-commerce market share continue to enjoy strong growth. DNS is an integral part of this success. But as traffic on the Internet grew, the entire net became vulnerable to Cyber attacks. A good portion of this vulnerability can be attributed to the inherent vulnerability of DNS.
DNS is inherently Insecure
The original design of the Domain Name System (DNS) did not include robust security features; instead it was designed to be a scalable distributed system and attempts to add security, while maintaining backwards compatibility were rudimentary and did not keep pace with the skills of malicious hackers. As a result cyber attacks created Internet chaos.
Security may top the list of enterprise and network administrators, but too often the link between security vulnerability and DNS is not understood. In order to enhance security and defend against cyber attacks, government agencies, commercial enterprises and network administrators must acknowledge the importance of DNS to the secure operation of the Internet.
Consequently, any commercial company that uses the Internet for sales, e-commerce, service, marketing or logistics, as well as Internet Service Providers (ISPs) and large, strategically sensitive government networks need to be aware of DNS vulnerability.
As the Internet expands in terms of users, devices and traffic, so does the opportunity for sophisticated DNS mayhem-whether malicious (hacking), aggravating (spam) or illegal (accessing sites containing content that violates legal and regulatory mandates) or devastating denial of service (DoS) attacks..
It became very evident that enterprises and ISPs must protect their users and networks-sometimes from the amateur hacker but increasingly from organized crime and state sponsored cyber terrorism. One of the most vulnerable, critical areas was DNS. Cyber attacks are expected to increase and have a bigger impact as the Internet grows.
The internet is also growing by an order of magnitude and just about every user of the internet is directly affected by the Domain Name System (DNS). The Domain Name System (DNS) is an essential part of the Internet. Many Internet security mechanisms, including host access control and defenses against spam and phishing, heavily depend on the integrity of the DNS infrastructure and DNS Servers.
DNS Servers
DNS servers running the software known as BIND (for Berkeley Internet Name Daemon, or sometimes Berkeley Internet Name Domain), is one of the most commonly used Domain Name System (DNS) server on the Internet, and still proclaims it to be so.
Presently, BIND is the de facto standard DNS server. It is a free software product and is distributed with most UNIX and Linux platforms. Historically, BIND underwent three major revisions, each with significantly different architectures: BIND4, BIND8, and BIND9. BIND4 and BIND8 are now considered technically obsolete. BIND9 is a ground-up rewrite of BIND featuring complete Domain Name System Security Extensions (DNSSEC) support in addition to other features and enhancements. But even with the rewrite BIND, in all versions, remains vulnerable.
A new version, BIND 10 is under development but the effectiveness of it its security features are untested. Its first release was in April 2010, and is expected to be a five-year project to complete its feature set.
Although BIND is still the de facto DNS software because it is included by most UNIX based server manufacturers at no cost, a number of other developers have produced DNS Server software that addresses the inherent weaknesses of BIND. Ratings of these packages can be found on http://www.kb.cert.org/vuls/
Common Vulnerabilities: Cache Poisoning and Distributed Denial of Service
The DNS vulnerabilities open the affected networks to various types of cyber attacks but cache poisoning and DDoS attacks are usually the most common.
Cache poisoning is arguably the most prominent and dangerous attack on DNS. DNS cache poisoning results in a DNS resolver storing (i.e., caching) invalid or malicious mappings between symbolic names and IP addresses. Because the process of resolving a name depends on authoritative servers located elsewhere on the Internet, the DNS protocol is intrinsically vulnerable to cache poisoning. Cache poisoning allows the perpetrator to gain access to proprietary information like bank records and social security numbers.
A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is focused on making computer resources unavailable to its intended users. A DDoS consists of the concerted efforts to prevent an Internet site or service from functioning efficiently or at all.
Perpetrators of DoS attacks typically target sites or services hosted on high-profile web servers such as government agencies, banks, credit card payment gateways, and even root nameservers. The term is generally used with regards to computer networks. Of particular concern are DoS or DDoS attacks on large government networks like the Department of Defense or Veteran's administration networks.
One way of compromising the network for a DDoS attack is through the vulnerabilities of CNS.
Until effective solutions are developed that reduce DNS vulnerabilities cyber attacks will increase particularly as new protocols expand the reach of the Internet.
Internet Protocol Version 6 (IPv6)
It was inevitable that the Internet capacity would be exhausted and it is near that point now.
The Internet is rapidly running out of capacity and solutions in the form of expanded Internet Protocols for this problem may create additional vulnerability. A phenomenon known as IPv4 address exhaustion results and Internet space disappears.
A new Internet Protocol, Version 6 (IPv6), is a replacement for Internet Protocol version 4 (IPv4), as the primary Internet Protocol in operation since 1981. The driving force for the redesign of Internet Protocol was the foreseeable IPv4 address exhaustion. In effect, without new protocols, the Internet will run out of capacity.
IPv6 has a significantly larger address space than IPv4. IPv6 uses a 128-bit address while the present IPv4 uses 32 bits. This expansion provides flexibility in allocating addresses and routing traffic and eliminates the growing need for network address translation (NAT), which gained widespread deployment as an effort to alleviate IPv4 address exhaustion.
IPv6 protocol expansion however, also opens new vulnerabilities for malicious cyber attacks as more and more users and applications gain access to the Internet.
DNSSEC
Some analysts believe that the Domain Name System Security Extensions (DNSSEC) provides an effective and comprehensive solution for DNS vulnerability issues. This is not the case however.
DNSSEC enables the use of digital signatures that can be used to authenticate DNS data that is returned to query responses. This helps combat attacks such as pharming, cache poisoning, DDoS and DNS redirection that are used to commit fraud, identity theft and the distribution of malware but does not guarantee secure data in the system.
It is widely believed that securing the DNS is critically important for securing the Internet as a whole, but deployment of DNSSEC specifically has been hampered by several procedural difficulties not the least of which is the lack of universal deployment and overcoming the perceived complexity of deployment.
Some of these problems are in the process of being resolved, and deployment in various domains is in progress. This may take an extended period of time however and during the process DNS continues to be vulnerable.
Even with the technical limitations, progress in implementing DNSSEC has been slow particularly in the Federal Government. Although the Federal Office of Management and Budget mandated that all government agencies will adopt DNSSEC by December 2009, nine months after the deadline for federal agencies to implement DNSSEC, only 30-40% of agencies have complied.
Government Network Solutions
Today's complex government networks must deliver the utmost security and reliability to protect against potential national security threats. A poorly architected DNS service infrastructure poses one of the greatest security vulnerabilities for any government network.
Likewise, choosing the wrong DNS solution can turn an otherwise well-architected service infrastructure into a compromised system capable of undermining data integrity and network stability.
Security against cyber attack is mandatory for government networks. More than any other networks, government networks demand the highest level of monitoring and visibility, security fortification, alerting and blocking to ensure appropriate corrective action. Without this protection, National Security and other nationwide infrastructure can be compromised.
Government Networks Have Unique Needs but Face Cumbersome Solutions
Until recently, federal cyber security efforts have been fragmented and cumbersome. Greater attention was paid to time consuming reporting requirements in order to meet standards. Although standards are important for establishing a baseline of security and meeting standards in order to reduce cyber attack damage, overly restrictive reporting requirements diminish their effectiveness.
In many ways, for government organizations, the information superhighway has become a virtual minefield. Government networks face this new global problem as much, if not more than other networks.
Not only do they have to support their users' performing the tasks necessary to complete their missions with uninterrupted Internet access, but they also have to ensure that this access remains uncompromised. Network administrators must continuously balance the need for open access for critical users against the need to keep the network secure.
When a user at a government organization goes to a Website (on multiple types of networks), they need to know that the content they receive is exactly what they were expecting. And just like subscribers on a Service Provider network, they need to be protected from known and suspected sites used to break into computers. The critically of very large networks and the drive to interconnect agencies make many federal networks particularly vulnerable.
All of this has to be done with the highest possible level of performance and availability. Government organizations also need to be absolutely certain that they can comply with DNSSEC and IPv6 mandates.
The government recognizes is addressing the needs of cyber security. Recent step include the creation of Cyber Command for DOD and Intelligence Agencies, a streamlining by the Office of Management and Budget of reporting requirements and an elevation of cyber security to a priority effort by the administration.
However, progress has been slow. Officials from key federal agencies, including the departments of Defense, Homeland Security and the Office of Management and Budget say they're moving too slowly to implement most of the 24 recommendations President Barack Obama outlined in his May 2009 cyber policy review.
Jon M. Stout is Chief Executive Officer of Aspiration Software LLC. Aspiration Software LLC is an Information Technology/Cyber Security services provider focused on the Intelligence Community (IC). For more information about Cyber Security and Information Assurance and Employment Opportunities in the Intelligence Community go to http://aspirationsoftware.com
