• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>2017 IEEE 15th International Conference on Dependable, Autonomic and Secure Computing, 2017 IEEE 15th International Conference on Pervasive Intelligence and Computing, 2017 IEEE 3rd International Conference on Big Data Intelligence and Computing, 2017 IEEE Cyber Science and Technology Congress >Hardening the Client-Side: A Guide to Enterprise-Level Hardening of Web Browsers
【24h】

Hardening the Client-Side: A Guide to Enterprise-Level Hardening of Web Browsers

机译：强化客户端：Web浏览器企业级强化指南

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Today, web browsers are a major avenue for cyber-compromise and data breaches. Web browser hardening, through high-granularity and least privilege tailored configurations, can help prevent or mitigate many of these attack avenues. For example, on a classic client desktop infrastructure, an enforced configuration that enables users to use one browser to connect to critical and trusted websites and a different browser for un-trusted sites, with the former restricted to trusted sites and the latter with JavaScript and Plugins disabled by default, may help prevent most JavaScript and Plugin-based attacks to critical enterprise sites. However, most organizations, today, still allow web browsers to run with their default configurations and allow users to use the same browser to connect to trusted and un-trusted sites alike. In this article, we present detailed steps for remotely hardening multiple web browsers in a Windows-based enterprise, for Internet Explorer and Google Chrome. We hope that system administrators use this guide to jump-start an enterprise-wide strategy for implementing high-granularity and least privilege browser hardening. This will help secure enterprise systems at the front-end in addition to the network perimeter.
机译：如今，Web浏览器已成为解决网络威胁和数据泄露的主要途径。通过高粒度和最低特权量身定制的配置，Web浏览器强化可以帮助防止或缓解许多此类攻击途径。例如，在经典客户端桌面基础结构上，强制配置使用户能够使用一个浏览器连接到关键和受信任的网站，对于不信任的站点使用不同的浏览器，前者仅限于受信任的站点，而后者则使用JavaScript和默认情况下禁用的插件可能有助于防止对关键企业站点的大多数基于JavaScript和基于插件的攻击。但是，今天，大多数组织仍然允许Web浏览器以其默认配置运行，并允许用户使用同一浏览器来连接到受信任和不受信任的站点。在本文中，我们提供了详细的步骤，用于针对Internet Explorer和Google Chrome远程加固基于Windows的企业中的多个Web浏览器。我们希望系统管理员可以使用本指南来启动企业范围的策略，以实现高粒度和最低特权的浏览器强化。除了网络外围，这还将有助于保护前端的企业系统。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号