MOT SO BIEN PHAP 1077 THUAT DE HAN CHE RUI RO AN TOAN THONG TIN KHI Sir DUNG HE DIEU HANH WINDOWS XP SAU

THIJI DIEM MICROSOFT NGfiNG HO TRQ

(Kern theo cong van sa 79/VNCERT-KTHT ngay 03/4/2014)

1. Thong tin chung

1.1. He 'lieu hanh Window XP

He dieu hanh Windows XP (Windows XP) cira hang Microsoft dugc ra mat vao ngay 25/10/2001 la mgt (long he dieu hanh (I-EDH) danh cho cac may tinh ca nhan, h76 trg bg vi xir 132 bit va 64 bit. Day dugc coi la he dieu hanh dugc sir dung rat ph6 bin dm hang Microsoft va cling IA the he he dieu hanh ke tic cua Ca cac phien ban he dieu hanh Windows 2000 Professional va Windows Me. Windows XP ban 32 bit dugc cung cap kern theo goi cap nhat m6i nhat la Service Pack 3(SP3) va Windows XP ban 64 bit dirge cung cap kern theo goi cap nhat mai nhat la Service Pack 2 (SP2), cac g6i cap nhat nay cung cap nhieu tinh nang bao mat b6 sung so voi phien ban Windows XP ban dau.

Hang Microsoft da cong 1)6 chinh thirc se ngimg ho trg Windows XP vao ngay 8/4/2014. Sau thoi diem nay, cac may tinh dang cai dat Windows XP van c6 the tip tic sir dung, cap nhat ban va da cg. Tuy nhien hang Microsoft se ngixng cac dich vi sau:

- Ffo trg ky thuat cho nguoi sir dung,

- Dich vu to dgng cap nhat (bao ggm cac ban va an toan thong tin) cho Windows XP,

- Dimg cung cap phan mem bao ve an toan thong tin Microsoft Security Essential danh cho Windows XP (cac may tinh da cai ph:an mem nay se c6 the tip tic sir dung va cap nhat du lieu dr Microsoft them mgt thai gian nira).

1.2. Anh huirng den nguiri sir dung khi khong dirge tiep tuc hO try

Do con mgt so lugng 16n may tinh tai Viet Nam van dang sir dung Windows XP nen viec Microsoft cham dirt h'6 trg he dieu hanh nay se gay nhang anh huong 16n tai ngired sir ding, dac biet trong khia canh an toan thong tin. Day la van de rat nghiem trong vi to nam 2008 d6n nay, Microsoft ding da

1

tong phai cung cap tren 600 huang dan, ban va khac nhau de khac phuc cac 16'i an toan thong tin cho Windows XP.

Tir thut to do, sau thoi diem ten kha nang tier) tic phat hien ra cac diem yeu an toan thong tin mai dm Windows XP la khong the loai trir va dieu d6 the tao ra cac 16' hang an toan thong tin cho phep tin tac tan ding gay hai, an cap hoac lam hu hang du lieu, lay nhigrn phan mem ma dOc hoac tham chi cuop quyen dieu khien may tinh trai phep. Va Microsoft cling da canh bao, cac phan mem anti-virus thOng thuang khong du kh a nang de b do dam an toan khi Windows XP bOc 1'9 diem yeu.

Nhu vay nguai sir dung Windows XP dimg truck hai sit km chon:

a) Nang cap he dieu hanh: thay the Windows XP bang cac N dieu hanh mai ducyc 116" tro tot han (dm hang Microsoft hoac cac hang khac ke ca N dieu hanh ngu'6n ma da dirge BO Thong tin va Truyen thong khuyen cao). Day la phucmg an ca ban trong dai han nhtmg doi h6i phai bao dam cac dieu kien: chi phi dau to de mua sam va cai dat he dieu hanh, phan mem he th6ng, cac ling dung, thiet bi.[ phan cling cho tuang thich; ciao tao va huang an sir dung cho mai truang mai, thed gian de thvc hien chuyen d6i m6i truang.

b) Tiep tuc sir dung Windows XP: phucmg an nay c6 the ap dung trong mot thai gian hop 1ST (tity theo muc dich, hieu qua sir dung) khi chua co du cac dieu kien thgc hien phucmg an tren. Ngtrai sir dung phai tang cuang ap dung cac bien phap bao dam an toan th8ng tin va phong ch8ng rili ro. Khong khuyen cao sir dung bien phap nay trong cac tnrang hop c6 yeu cau bao mat an toan thong tin cao.

2. MOt s6 bi0 phi') kST thulat can chii

Truck tinh hinh thtrc to nhu teen, Trung tam VNCERT khuyen cao cac t6 chirc, ca nhan mot s6 bien phap kSi thuat can ltru )'T a bao dam an toan thong tin khi nang cap he dieu hanh hoac tiep tuc sir dung cac may tinh voi Windows XP.

2.1 Bin dam an than khi Hang cap 14 dieu hanh

Khi ca quan, t6 chirc tin hanh nang cap hoac cai dat mai he dieu hanh de thay the Windows XP can chit 3'7 cac Hen phap k-y thuat sau:

Buck 1: Kim tra ky cac dieu kien truck khi nang cap

- Kiem tra va bao dam tinh tucmg thich dm cac phan mem he th6ng va cac ling dung d6i \Tad he dieu hanh du kien se nang cap.

2

- Kiem tra, bao dam tinh tucmg thich va yeu cau t6i thieu cua thiet bi phan ding doi vai he dieu hanh du kien se nang cap.

Tham khdo cac thong tin yeu can toi thieu ve phan cimg cua phien ban Windows 7, Windows 8 tai dia. chi Internet: http ://windows .mi cros o ft. com/vi-vn/windows7/pro ducts/sy stem-requirem ents va http://windows.microsoft.com/vi-vn/windows-8/system-requirements.

Tham khao yeu c'au phan cimg doi vai cac phien ban he dieu hanh ma ngu6n ma Linux nhu Ubuntu va Fedora tai dia chi Internet: https://help.ubuntu.com/community/Installation/SystemRequirements va http ://do c s . fedoraproj e ct. org/en-US/F edora/ 1 3/htmlNirtualization Guide/

chap-Virtualization-System_requirements.html. Buck 2: Thuc hien sao luu du phemg truck khi nang cap (de bao dam kha

nang khoi phvc khi nang cap that bap

- Lu-u lai cac thong tin lien quan den ban quyen, giay phep sir dung dm he dieu hanh va cac irng dung khac.

- Sao luu du phong bo cai dat he dieu hanh, cac ban va, cac phan mem Bang sir dung de sir dung khi can thiet.

- Sao luu 6 cimg truck khi cai dat, du lieu nay se dugc sir dung de bao dam kha nang khoi phvc lai khi CO su co xay ra.

Bulk 3: Thgc cai dat he dieu hanh mai va cac phan mem ling dung

- Thuc hien nang cap hoac cai slat mai he dieu hanh theo dung huang clan cua nha san

- Cai dat cac phan mem he th6ng va irng dung (thong thich) can thiet.

- KhOi phvc tai he th6ng thong qua cac du lieu da dugc sao luu a bulk 2 khi viec nang cap that bai.

Buck 4: Thuc hien cac bien phap bao dam an toan thong tin cho moi truang mai

- Ap dung cac bien phap va thiet lap cac chinh sach bao ve an toan thong tin cho he th6ng mai dugc cai dat.

- Tao lap cac ban sao du lieu, he th6ng a his trq viec phvc h6i he th6ng.

2.2 Bao dam an toan khi tiep tuc sir dung Windows XP

Khi chua có dieu kien nang cap hoc cai at he dieu hanh mai thay the Windows XP, cac to chirc, ca nhan can chil y thuc hien cac bien phap sau:

3

a. Thuc hien sao luu du phong nhu buck 2 mpc 2.1.

b. Thiet lap the do bao dam an toan thong tin cho he th6ng may tinh Windows XP trong qua trinh sir dpng van hanh:

- Sir dung Wong lira dugc tich hgp sari tr'en he dieu hanh, ket hgp voi tieing lira cUa he thOng mang de quan 15/ truy cap tir cac may tinh khac tad may tinh cua

minh va ngugc lai. Viec thiet lap Wong lira phai bao dam yeu cau chi cho phep cac dich vu dugc pile') sir dung mo cong ra ben ngoai, &mg toan 1)(5 cac cong dich vu khong can thiet.

- Go be) hoac tat cac dich v1.1 khong dung den hoac it dUng, trong do dac biet cho 3'T cac dich vu cho phep ket not ben ngoai: Netmeeting Remote Desktop

Sharing, Remote Desktop, Remote Registry, Routing & Remote Access, SSDP Discovery Service, Universal Plug and Play Device Host, Telnet v.v...

- Trong truang hop bat bui5c phai ket not quan tri tir xa, khong ket not true tiep taxi cac dich vu cho phep quan tri he dieu hanh tir xa nhu dich vu Remote Desktop. Trong truang hop ngoai sir' Ong can phai quan tri may tinh tir xa thi can sir dpng ket not gian tiep sir dung giao thirc 118 trg ma Ma, bao mat nhu VPN, SSH v.v...

c. Tham khao ap dijng gtat phap bao dam an toan thong tin cho Windows XP "VKT Total Security" dm cong ty Viet Kien Tao.

Giai phap cua cong ty Viet Kien Tao cho phep bao ve may tinh sir dung Windows XP khoi anh huang dia ma d'cic va cac sir co khac dan den mat an toan thong tin, giai phap nay cung cap có ba nhom tinh nang chinh sau:

- VKT Internet Security (VIS): Chong ma dac xam nhap qua dueng internet.

- VKT Smart Recovery (VSR): Phvc hot he th6ng thong minh.

- VKT User Security (VUS): Bao ve toan vgn mot tai khoan nguai dimg.

Mot so tinh nang cua giai phap tren da dugc Trung tam VNCERT kiem tra, danh gia cho thay hoat cong on dinh, phu hop de nang cao tinh nang an toan cho may tinh sir di:mg Windows XP. Tham khao thong tin chi tiet tai dia chi Internet: http://vkt.com.vn/

d. Sir dung cac trinh duyet web nhu Firefox, Mozillar, Chrome hoac Internet Explorer phien ban mad (con dugc Microsoft h8 trg) de thay the cho trinh duy'et Internet Explorer di kern theo Windows XP.

4

e. Sir dung cac ung dung khac (con dugc nha san xuat ho trg) thay the cho phan mem duyet thu dien tir Outlook Express di kern theo he di'eu hanh Windows XP. Vi du nhu: Thunder Bird, Office Outlook v.v...

g. Khong tai (download) va cai Tat cac ban va ma khong ro nguen gac, kiem tra tinh toan yen cac ban va truck khi sir dung.

2.3 M(it so chi' ST ve cach sir dung an town he dieu hanh

a. Thiet lap chinh sach dat mat khau an toan cho cac tai khoan CO trong he thOng, c6 the tham khao hugng dan "Huang dan dat va sir dung mat khau an toan" cUa Trung tam VNCERT tai dia. chi Internet: http://www.vncert.vnitainguyen/Huong_dan_su_dung_mat_lchau_an_toan.pdf

b. Thiel lap tai khoan nguoi dimg yeti quyen thap nhat, chi vira clu cle phuc vu cong viec theo dimg chirc nang, nhiem vu dugc giao. Quan ly va dat mat khau an toan cho cac tai khoan mac dinh Administrator va Guest. CO the vo hieu h6a tai khoan Guest khi khong sir dung.

c. Khong sir' dung tai khoan c6 quyen quan tri (Administrator) khi khong can thiet cle giam kha nang lay nhiem ma dOc vao he thOng. Chi sir dung quyen quan tri khi cai dat, b6, cau hinh thay dOi thong tin ve he thOng v.v...

d. Bat chirc nang ghi nhat 14r hoat dOng de theo doi va giam sat hoat dOng sau: Account logon events, Account management, Logon events, Object access, Policy change, Privilege use, System events.

e. Vo hieu h6a chirc nang chia se tai nguyen mac dinh cho mot so phan vimg va dich vu bao gOm: C$ D$ E$, ADMIN$, FAX$, IPC$, NetLogon, PRINT$.

g. Tat bo cac tinh nang to dOng chay img dung khi ket not yeti thiet bi ltru trir ngoai (vi du the nhg ngoai giao tiep qua cong USB) de giam nguy co lay lan ma d'Oc thong qua viec sao chop thong tin. Trong tr&mg hop can thik ngugi sir dung c6 trinh do IcS:r thuat c6 the tao phan viing (partition) rieng cle ghi, hru du lieu nhung cam chay cac top tin thut thi ten phan vimg nay, bien phap nay se cho phep ngan can thvc thi cac top tin c6 chira ma dOc.

h. Cai crat va dinh kS, cap nhat dit lieu cho phan mem Antivirus va thuong xuyen sir dung phan mem nay d'e kiem tra va phat hien ma dOc.

i. Sir dung ding cu "Tcpview.exe" de kiem tra va phat hien cac ket nOi mpg bat thireing tir may tinh cua minh ra cac dia chi la ben ngoai mang va sir dung cong cu "procexp.exe" de kiem tra cac tien trinh la sinh ra trong khi may

5

tinh kh6i Ong hoac khOng sir (king. Hai cong cu nay dirge tich hop trong b9

cong cu "Sysinternals Suite" do hang Microsoft cung cap tai dia. chi Internet: http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx.

k. Tat may tinh, clang xuat khoi he th6ng hoac khoa man hinh (co mat khau) khi khong sir (twig.

1. Tham khao them cac bien phap bao mat do hang Microsoft fluxing dan tai dia chi Internet "http://www.microsoft.com/vietnam/support/".

6