How Secure is your Windows Network?

Windows operating systems have seen many changes since the early DOS-Disk Operating system and MS-Windows GUI. Microsoft is caught in its own web of monopolistic practices. It cannot do away with its old versions of operating systems and drivers but must always look at backward compatibility for more market revenue. Thus vulnerabilities occur in the system. A variety of windows security updates, security patches, service packs and windows security alerts are issued by the Microsoft to overcome network security attacks that occur. Windows security center is a new tool incorporated into Windows XP so that users know their windows network security and the risks. This seems to be too little too late. We travel down memory lane to see; what are the vulnerabilities with the various Windows based operating systems.

Windows 95/98/9x and ME

Windows 95/98/9x and ME platforms are all true single user platforms. They show many user profiles and it looks like a multiple user platform but in reality there is only one end user at a given time. These systems have true user-level security. It is impossible for anyone to get into these systems if they have been configured properly.

The vulnerabilities are

• Malicious code from website
• Malicious code by opening unsafe email attachments
• Social engineering causes that load Trojans and other malicious codes
• Backdoor entry in case of the remote connections made for file sharing or print sharing. If a computer is being used for remote access mode the vulnerability are passwords, hijacking of shared resources and even being tricked into remote registry service.

Examples of exploits

• Back Orifice: Allows near total control of Win9X systems
• Net Bus: Includes a Port scanner that allows the remote user to open/close the CD-ROM drive, spy on chats
• Sub Seven: Takes screenshots, Allows remote control, Stealth Tactics, Logs keystrokes, Stays Resident, Sends mail, Allows remote connect, Opens ports

WINDOWS NT/2000/XP EXPLOITS

Networks are more vulnerable to problems than single user systems. This is primarily due to the fact that when more systems are there it is difficult to track changes that users make on their individual systems. The security is not true user level security but is share level security. Windows file security is difficult and it is harder for the system administrator to track the presence of intruders since there is a majority of software that covers their tracks. Also Network operating systems are shipped with many user accounts. By default there is a system administrator account and a guest account. If any attacker is able to guess any of these passwords (generally people use passwords like name of their wife or children or date of birth etc.) then the machine is compromised.

Continue to : Security: Windows and its services

Related Articles

Essentials of a Network: Network Security
How is the Security of your Network Compromised?
Network Security and Linux: Is it really better?
Is your Home Network Safe From Viruses and Hackers?
How Secure is Your Wireless Network?

Bookmark this page Email this to your friend Add this page to del.icio.us