广州市电子政务外网 系统平安 加固指南 〔版〕 .....................................................................1
Windows 系统平安加固 ..................................................................................................................4
1．补丁更新 .....................................................................................................................................4
1.1 到微软网站下载最新的补丁程序 ...................................................................................4
2．平安加固 .....................................................................................................................................4
停掉 Guest 帐号 ....................................................................................................................4
限制不必要的用户数量 .........................................................................................................4
创立 2 个管理员用帐号 .........................................................................................................4
把系统 administrator 帐号改名 .........................................................................................5
创立一个陷阱帐号 .................................................................................................................5
2.7 把共享文件的权限从〞everyone〞组改成“授权用户〞 ...........................................5
2.8 使用平安密码 ...................................................................................................................5
2.9 设置屏幕保护密码 ...........................................................................................................5
2.10 使用 NTFS 格式分区 .......................................................................................................6
2.11 利用 win 的平安配置工具来配置策略 .........................................................................6
2.12 关闭不必要的效劳 .........................................................................................................6
2.13 关闭不必要的端口 .........................................................................................................7
2.14 翻开审核策略 .................................................................................................................7
2.15 开启帐户策略 .................................................................................................................8
2.16 不让系统显示上次登陆的用户名 .................................................................................8
2.17 禁止建立空连接 .............................................................................................................8
2.18 关闭 DirectDraw ...........................................................................................................8
2.19 关闭默认共享 .................................................................................................................8
2.20 禁止 dump file 的产生 .................................................................................................9
2.21 使用文件加密系统 EFS ..................................................................................................9
2 锁住注册表 ...........................................................................................................................9
2.23 建议安装 urlscan〔或直接安装 IISLockdown〕 .....................................................10
2.24 关闭 RPC DCOM 组件 .....................................................................................................10
TOMCAT 系统平安加固 ..............................................................................................................11
1. Tomcat 平安配置 ....................................................................................................................11
1.1. 根本平安配置..........................................................................................................11
1.2. 多重效劳器的平安防护..........................................................................................11
1.3. 配置效劳器默认端口..............................................................................................12
1.4. 关闭效劳器端口......................................................................................................12
1.5. 默认错误网页设置..................................................................................................13
1.6. 配置支持 SSL..........................................................................................................13
配置支持 SSL 的方法(分别以 TEST,TestAdmin 两实际访问对象举例) .............13
MS SQL 系统平安加固 .................................................................................................................16
1. 安装最新平安补丁..................................................................................................................16
1.1. 安装操作系统提供商发布的最新的平安补丁......................................................16
2. 网络和系统效劳......................................................................................................................17
2.1. 检查系统文件是装置在 NTFS 分区......................................................................17
