Μελέτη μηχανισμών whitelisting σε λειτουργικά windows: τεχνικές παράκαμψης και μέτρα ασφάλειας

Κούτρας, Δημήτριος

Study of whitelisting mechanisms in windows operating systems: bypassing techniques and security controls

Master Thesis

Author

Κούτρας, Δημήτριος

Date

2019-09

Abstract

Modern Operating Systems are enhanced with several techniques for system security. Whitelisting is a common technique for securing, the network, the system and the application layer. Application whitelisting tools such as AppLocker are supported by modern operating systems and offer the ability to dynamically control the access of individual users or groups at the application level. The purpose of this thesis is to compare the individual features of two particularly popular whitelisting tools for Windows operating systems (Software Restriction Policy, AppLocker). More specifically, through an organizational structure of a company, we examine the operation, the capabilities, the differences and the effective security configuration of these tools. In addition, we analyze and test known bypassing techniques that exist for the above whitelisting tools, as well as the available security measures to effectively deal with the above bypassing techniques. Finally, the most important conlusions are presented, along with suggestions for future work.

Postgraduate Studies Programme

Προηγμένα Συστήματα Πληροφορικής

Department

Σχολή Τεχνολογιών Πληροφορικής και Επικοινωνιών. Τμήμα Πληροφορικής

Number of pages

Language

Greek

URI

https://dione.lib.unipi.gr/xmlui/handle/unipi/12177

Collections

Τμήμα Πληροφορικής

Show full item record

Except where otherwise noted, this item's license is described as
Attribution-NonCommercial-NoDerivatives 4.0 Διεθνές