Beckhoff IPC-Security Instrukcja Użytkownika Pobierz pdf (Strona 27)

Software Category Description

Microsoft Windows XP System software Operating System

Microsoft Windows 7 System software Operating System

Microsoft Windows Embedded System software Operating System

Microsoft Windows CE System software Operating system

Windows Update client Update software Used to receive Windows Up-

dates from a central Windows

Update Server

Windows Update server Update software Used to distribute Windows Up-

dates from a central location to

network clients

Internet Information Service Webserver software Default HTTP and FTP server

in Microsoft Windows operating

systems

Remote Desktop Maintenance software Default remote maintenance

software distributed in Microsoft

Windows operating systems

(not Windows CE)

CerHost Maintenance software Default remote maintenance

software distributed in Windows

5.1.3. Potential threat scenarios

The following chapter gives a short overview about possible threat scenarios, which may or may not be rep-

resentative in your environment. Please take the following chapters as a means to gain a better awareness

for this scenario.

5.1.3.1. Manipulated websites

By directing a user to access a manipulated and untrusted website, an attacker could either fool the user to

disclose sensitive information, e.g. passwords, or use a vulerability of the web browser to remotely access

the operating system.

Due to this, an attacker could gain access to the system with the same privileges asthe user.

5.1.3.2. Man-in-the middle attacks

By intercepting network communiations using a non-secure network protocol, an attacker could expose

himself as a trusted source for all participants and as such manipulate or read all transferred information.

5.1.3.3. Open network ports

By scanning the network for open network ports, an attacker could use network services that have been

unnecessarily activated because they have no use in the specific system.

Due to this, an attacker may use those services to trigger unwanted events.

IPC Security 27

1 2 ... 22 23 24 25 26 27 28 29 30 31 32 ... 72 73

Brak uwag

Beckhoff IPC-Security Instrukcja Użytkownika Strona 27