素材库合集.ppt

Click to edit Title Slide,Click to edit Master text styles,Second level,Third level,Fourth level,Fifth level,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,*,*,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,*,*,素材库合集,素材库合集素材库合集Integrated phone and PDA,Primarily data viewing,Interoperability with Outlook and Exchange,.NET Compact Framework,ASP.NET mobile controlsMobile Device SolutionsComplex document authoring,editing and reading,Keyboard centric at the desk,Keyboard and mouse input methods,Full.NET framework available,Centrino SolutionsWindows MobileWindows XPComplex document authoring,editing and active reading,Note taking and ink annotating,Keyboard centric at the desk,pen and keyboard away from the desk,Keyboard,mouse plus pen,ink,and speech input methods,Full.NET framework preinstalled,Pen,ink,handwriting and speech recognition APIs,Centrino SolutionsView and some data entry,Integrated PDA with phone,Interoperability with Office,Exchange and SQL Server,.NET Compact Framework,ASP.NET mobile controls,Intel Xscale SolutionsWindows CEOne-way network,Information consumptionSmart Personal ObjectsSmartphonePocket PC and Pocket PC PhoneNotebook PCTablet PC,Integrated phone and PDA,Primarily data viewing,Interoperability with Outlook and Exchange,.NET Compact Framework,ASP.NET mobile controls,Mobile Device Solutions,Complex document authoring,editing and reading,Keyboard centric at the desk,Keyboard and mouse input methods,Full.NET framework available,Centrino Solutions,Windows Mobile,Windows XP,Complex document authoring,editing and active reading,Note taking and ink annotating,Keyboard centric at the desk,pen and keyboard away from the desk,Keyboard,mouse plus pen,ink,and speech input methods,Full.NET framework preinstalled,Pen,ink,handwriting and speech recognition APIs,Centrino Solutions,View and some data entry,Integrated PDA with phone,Interoperability with Office,Exchange and SQL Server,.NET Compact Framework,ASP.NET mobile controls,Intel,Xscale,Solutions,Windows,CE,One-way network,Information consumption,Smart Personal Objects,Smartphone,Pocket PC and Pocket PC Phone,Notebook PC,Tablet PC,Network Defense,Health checkup,IT checks“health”of client,Network Access Control,Clients who pass get network access,Clients who do not pass are fixed or blocked(aka“quarantined”),Health maintenance,Quarantined clients can be given access to resources to get healthy,From Home(VPN,Dial up),Returning Laptops,ConsultantsGuests,UnhealthyDesktops,Microsoft Business Solutions ERP Positioning,Project Management and Accounting ERP,Primarily in US and Latin America,Mid-market ERP,Typically customized for unique business processes,Global ERP,Multinationals,Advanced manufacturers,Mid-market ERP,Rich out-of-the-box functionality,Guiding Principles,Productive,Integrated,Extensible,Capable,Short learning curve,Minimal administrative overhead,Tools integrated tightly,Automates common tasks,Customizable for your process,Integrates with 3rd party tools,Remotely accessible,Robust,secure,scalable,Staging Architecture,Data entry,Test,Application Center,Commerce Web,Commerce,Commerce Data,Commerce Web,Commerce,Commerce Data,Application,Center,Application,Center,Data,ACS Cluster,ACS Cluster,Cluster controller,Cluster controller,Data,Live Communications Client Roadmap,LC 1.2 Client Platform,Multiparty IM,P2P Voice and Video,MPOP,Groups,Roaming,SIP support,GPO policy management,LC 1.5 Client Platform,Roll up of QFEs,MPOP Additions,Federation/Archiving Notification,HA Additions,LC 2.0 Client Platform,Next generation of RTC experiences,More coming!,2003,2H04,Longhorn,Enterprise Deployment Update,Internet,Firewall,Firewall,Firewall,Runtime Servers,Corporate LAN Internal Servers,Crawl/Search,Load Balanced Web,Infrastructure Servers,Development Servers,Test Servers,Business Data Servers,Business Users,Database and Staging Servers,Staging Servers,Database Servers,Offline Servers,Indicates Staged Data Flow,Communicate and collaborate in a more secure mannerwithout sacrificing information worker productivity,Windows XP SP2,Block virus or malicious code at the“point of entry”,At Risk,The Soft,Underbelly,Security Issues Today,1 Source:Forrester Research,2 Source:Information Week,26 November 2001,3 Source:Netcraft summary,4 Source:CERT,2003,5 Source:CSI/FBI Computer Crime and Security Survey,6 Source:Computer Security Institute(CSI)Computer Crime and Security Survey 2002,7 Source:CERT,2002,8 Source:Gartner Group,14B devices on the Internet by 2010,1,35M remote users by 2005,2,65%increase in dynamic Web sites,3,From 2000 to 2002 reported incidents rose from 21,756 to 82,094,4,Nearly 80 percent of 445 respondents surveyed said the Internet has become a frequent point of attack,up from 57 percent just four years ago,5,90%detected security breaches,6,85%detected computer viruses,6,95%of all breaches avoidable with an alternative configuration,7,Approximately 70 percent of all Web attacks occur at the application layer,8,Application Layer Attacks,Identity Theft,Web Site Defacement,Unauthorized Access,Modification of Data,Logs and Records,Theft of Proprietary Information,Service Disruption,Implications,Compliance:,Sarbanes Oxley,Gramm Leach Blilely,US Patriot Act,HIPAA,The Privacy Act(CA),Basel 2(EU),Data Protection Act(EU),Litigation,Piracy,HR Issues,Shareholder Suits,Customer Impact,Types Of SRP Rules,Path Rule,Compares path of run to an allowed path list,Use when you have a folder with many files for the same application,Essential in when SRPs are strict,Hash Rule,Compares the MD5 or SHA1 hash of a the one attempted to be run,Use when you want to allow/prohibit a certain version of a being run,Certificate Rule,Checks for digital signature on application(i.e.Authenticode),Use when you want to restrict both win32 applications and ActiveX content,Internet Zone Rule,Controls how Internet Zones can be accessed,Use when in high security environments to control access to web applications,SQL Server 2005 Themes,Supportability&Quality,Enterprise Enhancements,Unified&Flexible Administration,Patch Solutions,Prevention,Readiness,Recovery,Ease of use,Patch Installs,Patch in integrated step,Integrated Database Services and Business Intelligence,Flexible install management,Add value to one-step Failover Clustering,Expanded scripting support,Traditional Firewalls,Wide open to,advanced attacks,Performance versussecurity tradeoff,Limited capacity,for growth,Hard to manage,Code Red,Nimda,SSL-based attacks,Security is complex,IT is already overloaded,Bandwidth too expensive,Too many moving parts,Not easily upgradeable,Dont scale with business,Choosing the Right Type of Assessment,Vulnerability Scanning,Focuses on known weaknesses,Of the three,requires the least expertise,Generally easy to automate,Penetration Testing,Focuses on known and unknown weaknesses,Requires advanced technical expertise,Carries tremendous legal burden in certain countries/organizations,IT Security Audits,Focuses on security policies and procedures,Of the three,requires the most expertise,When done right is the most effective type of assessment,Perimeter Security Evolution,Wide open to,advanced attacks,Application-level protection,Performance versussecurity tradeoff,Security and performance,Limited capacity,for growth,Extensibility and scalability,Hard to manage,Easier to use,The,advanced application layer firewall,VPN and Web cache,solution that enables customers to maximize IT investments by improving network security and performance,Advanced protection,Application layer security designed to protect Microsoft applications,Fast,secure access,Empowers you to connect users to relevant information on yournetwork in a cost efficient manner,Ease of use,Efficiently deploy,manage,and enable new usage scenarios,Introducing:ISA Server 2004,Fast,secure access,Empowers you to connect users to relevant info.on your network,ISA Server 2004 New Features,Continued commitment to integration,Enhanced,architecture,High speed data transport,Utilizes latest Windows and PC hardware,SSL bridging unloads downstream servers,Web cache,Updated policy rules,Serve content locally,Pre-fetch content during low activity periods,Internet access,control,User-and group-based Web usage policy,Extensible by third parties,Comprehensive,authentication,New support for RADIUS and RSA,SecurID,User-&group-based access policy,Third party extensibility,System Service Accounts,Local Service and Network Service,No password to manage,Runs with only slightly more permissions than Authenticated User,Local Service cannot authenticate across the network,Network Service authenticates as the computer account,Local System,No password to manage,Bypasses security checks,User Accounts,Run with less privilege than Local System,Stores password as an LSA secret,Can be complex to configure,Whats New With IPSec?,Management,IP Security Monitor,Command-line management with Netsh,Logical addresses for local IP configuration,Security,Stronger cryptographic master key(Diffie-Hellman),Computer startup security,Persistent policy for enhanced security,Ability to exclude the name of the CA from certificate requests,Better default exemption handling,Interoperability,IPSec functionality over network address translation(NAT),Improved IPSec integration with Network Load Balancing,ISA Server 2004 New Features,New management tools and user interface,Multi-network,architecture,Unlimited network definitions and types,Firewall policy applied to all traffic,Per network routing relationships,Network templates,and wizards,Wizard automates,nwk,routing relationships,Supports 5 common network topologies,Easily customized for sophisticated scenarios,Visual policy editor,Unified firewall/VPN policy w/one rule-base,Drag/drop editing w/scenario-driven wizards,XML-based configuration import-export,Enhanced,trouble-shooting,All new monitoring dashboard,Real-time log viewer,Content sensitive task panes,Ease of Use,Efficiently deploy,manage,and enable new usage scenarios,How To Use Windows Update,To configure Automatic Updates:,Select Keep my computer up to date,Open the System application in Control Panel,1,On the Automatic Updates tab,select theoption you want,3,2,Office Update,Benefits,Limitation,Single location for office patches and updates,Easy to use,Can be configured to update consumer orenterprise systems,Does not support Automatic Updates;updating must be initiated manually,Office Update Web site:,How To Use Office Update,Go to,1,Click Check for Updates,2,Install the Office Update Installation Engine(if not already installed),3,Select the updates you want to install,4,Click Start Installation,5,How To Use SUS,On the SUS server,Configure the SUS server at SUSAdmin,On each SUS client,Configure Automatic Updates on the client to use the SUS server Use Group Policy,manually configure each client,oruse scripts,Set the SUS server synchronization schedule,Review,test,and approve updates,1,2,3,How To Use MBSA,Download and install MBSA(once only),1,Launch MBSA,2,Select the computer(s)to scan,3,Select relevant options,4,Click Start scan,5,View the Security Report,6,Software Update Service,Deployment Best Practices(1),Review each security patch,Download and install the patch,Test each security patch before deployment,Configure a test lab,Use a test SUS server,Consider using Virtual PCs in the test lab,Use a standard acceptance testing procedure,Software Update Service,Deployment Best Practices(2),Complete the deployment,Pilot the deployment,Configure a child SUS server to approve updates,Configure a GPO so that the patch is downloaded from the pilot SUS server only by specified workstations,If the pilot fails,remove approval from the SUS server and manually uninstall the patch,How To Use SMS To Deploy Patches,Open the SMS Administrator Console,1,Right-click All Windows XP Computers,and then select All Tasks Distribute Software Updates,3,Use the wizard to create a new package and program,4,Browse to the patch to be deployed,5,Configure options for how and when the patch will be deployed to clients,6,Expand the Site Database node,2,SMS MBSA Integration,MBSA integration included with SMS 2003 and the SUS Feature Pack for SMS 2.0,Scans SMS clients for missing security updates using mbsacli.exe/hf,SMS directs client to run local MBSA scan,1,SMS server parses data to determine which computers need which security updates,3,Administrator pushes missing updates only to clients that require them,4,Client performs scan,returns data to SMS server,2,MBSA Benefits,Scans systems for,Missing security patches,Potential configuration issues,Works with a broad range ofMicrosoft software,Allows an administrator to centrally scan multiple computers simultaneously,MBSA is a free tool,and can bedownloaded from,MBSA Considerations,MBSA reports important vulnerabilities,Password weaknesses,Guest account not disabled,Auditing not configured,Unnecessary services installed,IIS vulnerabilities,IE zone settings,Automatic Updates configuration,Internet Connection Firewall configuration,MBSA Scan Options,MBSA has three scan options,MBSA graphical user interface(GUI),MBSA standard command-lineinterface(mbsacli.exe),HFNetChk scan(mbsacli.exe/hf),Business Case ForPatch Management,When determining the potential financial impact of poor patch management,consider,Downtime,Remediation time,Questionable data integrity,Lost credibility,Negative public relations,Legal defenses,Stolen intellectual property,“,We commend Microsoft for providing enhanced security guidance to its customers as well as for soliciting user input as part of the process of producing that guidance“,Clint Kreitner,President/CEO,“,NIST reviewed and provided technical comments&advice,that was incorporated in this guidance”,Timothy Grance,Manager,Systems and Network Security Group,Comments,Securely make e-mail available to outside employees,Exchange publishing,You Need To,Securely make internal applications available on the Internet,Web and Server Publishing,Enable partners to access relevant information on my network,Integrated S2S VPN and FW,Secure and flexible remote access,while protecting my corporate network,Integrated RRAS VPN and FW,Securely connect my branch offices to the corporate office,Integrated FW,VPN,Cache,Control Internet Access and protect my clients from malicious Internet traffic,FW,Web Proxy,Ensure fast access to the most frequently used web content,Caching,ISA Delivers,Relational Reporting,Multiple fact tables,Full richness the dimensionsattributes,Transaction level access,Star,snowflake,3NF,Complex relationships:Multi-grains,many-to-many,role playing,indirect,Recursive self joins,Slowly changing dimensions,The Unified Dimensional Model The Best Of Relational And OLAP,OLAP Cubes,Multidimensional navigation,Hierarchical presentation,Friendly entity names,Powerful MDX calculations,Central KPI framework,“Actions”,Language translations,Multiple perspectives,Partitions,Aggregations,Distributed sources,Visual Studio Team System,Change Management,Work Item Tracking,R