Unit OS7: Windows Security Components and Concepts

More documents

Recommendations

Info

12 Communication between SRM and LSA Communication via local procedure call (ALPC) SeLsaCommandPort/SeRmCommand port for initialization Usage of private ports/shared memory when initialization is completed Set audit event Create logon session Delete logon session Local security authority (LSA) server Private comm. port SeLsaCommandPort Private comm. port User mode Kernel mode Private comm. port SeRmCommandPort Security reference monitor (SRM) Private comm. port Write audit message Delete logon session Shared section
13 Protecting Objects Access to an object is gated by the Security Reference Monitor (SRM), performs access validation at the time that an object is opened by a process Access validation is a security equation that consists of the following components: Desired Access: the type of access that is being requested. must be specified up front, include all accesses that will be performed on the object as a result of the validation. Token: identifies the user that owns the process, as well as the privileges of the user. Threads can adopt a special type of token called an “impersonation token” that contains the identify of another account. The Object’s Security Descriptor contains a Discretionary Access Control List (DACL), describes the types of access to the object users are allowed.
Page 1 and 2: Windows Security
Page 3 and 4: 3 Windows Security Mechanisms Permi
Page 5 and 6: User Mode Security Components WinLo
Page 7 and 8: 7 LSASS Components SAM Service A se
Page 9 and 10: 9 LSASS Components Net Logon servic
Page 11: 11 Security Reference Monitor Perfo
Page 15 and 16: 15 Tokens The main components of a
Page 17 and 18: 17 Security Descriptors Descriptors
Page 19 and 20: 19 Discretionary Access Control Lis
Page 21 and 22: 21 Example: Access granted Security
Page 23 and 24: 23 Access Check Quiz Token Mark Aut
Page 25 and 26: 25 Access Special Cases An object
Page 27 and 28: 27 Controllable Inheritance In NT 4
Page 29 and 30: Impersonation Lets an application a
Page 31 and 32: 31 Privileges Specify which system
Page 33 and 34: 33 What Makes Logon Secure Before a
Page 35 and 36: 35 Logon LSASS creates a token for
Page 37 and 38: 37 Remote Logon - Active Directory
Page 39 and 40: 39 Cross-platform Strategy Common K
Page 41 and 42: 41 Kerberos principles Kerberos req
Page 43 and 44: 43 Tickets and Authentication info
Page 45 and 46: 45 Ticket Characteristics KDC retur
Page 47 and 48: 47 Further Reading Mark E. Russinov

Unit OS7: Windows Security Components and Concepts

Create successful ePaper yourself

Delete template?

Save as template?