Embed Size (px)
Citation preview
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 1/20
Mbtdrbdt KrjelnestdrsAuhtmadlme ^drvdr ^dnurmty Iumld
Yrmttdb Ky
Levml Ngmhldrs
www.^ndbmn[elmj.Nja[dhexmbi Dbtdrtembadbt `jr tgd Yjrhl
www.KrjelnestmbiYjrhl.NjaIhjkeh Krjelnest Mb`jraetmjb Sjrteh
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 2/20
Nrdetmvd Njaajb Hmndbsd
\gms kjly j` wjr ms rdhdesdl !bldr tgd "ttrmk!tmjb#$gerd"hmd vdrsmjb %&'( Nrdetmvd Njaajb )mndbsd&
\gd wjr aey kd `rddhy lmstrmk!tdl jr ajlm*dl `jr njaadrnmeh jr bjb njaadrnmeh +!r+jsds&
M` tgms wjr ms ajlm*dl( nja+hmebnd wmtg tgd "ttrmk!tmjb#$gerd"hmd vdrsmjb %&'( Nrdetmvd Njaajb )mndbsd ms rd,!mrdl&
\gdsd rd,!mrdadbts mbnh!ld-
# "by ldrmvetmvds j` tgms wjr a!st kd ettrmk!tdl tj Levml Ngmhldrs&# "htdretmjbs( trebs`jrambi( jr k!mhlmbi !+jb tgms wjr rd,!mrds lmstrmk!tmbi tgd rds!htmbi wjr jbhy !bldr tgd sead(smamher jr e nja+etmkhd hmndbsd&
.jr tgd nja+hdtd hdieh njld( +hdesd rd`dr gdrd-www&nrdetmvdnjaajbs&jri/hmndbsds/ky#se/%&'/hdiehnjld
Njvdr ire+gmn # 3ebmtes $tmhh )m`d # S!khmn Ljaemb Maeid&ire+gmns`emry&khjis+jt&nja/5';;/'>/ebtm,!d#nhm+#ert#sdhdtjb#dys#ebl#hjn>ah
.jrdwjrl ire+gmn # " $mhdbt Njhhj,!y # Se!h $teld( \gd <eie4mbd j` "rt( )jbljb( ;009&db&wmm+dlme&jri/wmm/.mhd-Smdtdr7Nheds47''5k&=+i
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 3/20
Ekjut \gd Eutgjr
Levml Ngmhldrs ms tgd Njbtdbt <ebeidr `jr tgd Ihjkeh Krjelnestmbi +jrteh www&KrjelnestmbiYjrhl&nja & 6d ms vdryentmvd mb tgd Mbtdrbdt krjelnest mbl!stry ebl ges wrmttdb b!adrj!s i!mlds ebl e kjj ekj!t tgms irjwmbi tdngbjhjimne*dhl& 6d ms ehsj tgd wdkaestdr j` www&$ndbmn[elmj&nja( tgd ihjkeh ldstmbetmjb `jr rdhexmbi dbtdrtembadbt&
<r& Ngmhldrs? wjr ges kddb nmtdl mb sdvdreh betmjbeh ebl Mbtdrbetmjbeh +!khmnetmjbs( mbnh!lmbi tgdsd-
.mvd Dsseys jb Nj+yrmigt Mb tgd Lmimteh Dre \!rrd S!khmsgmbi
[dsderng 8b 6mig#Srj*hd Lmimteh 3mldj Srjl!ntmjbLmimteh Njbtdbt "ssjnmetmjb j` 1e+eb
3mldj Sjlnestmbi mb Sdrs+dntmvd- \gd 6mstjry( \dngbjhjiy( "dstgdtmns ebl Mbstr!ntmjbeh 2sds j` e :dw <dlm!a 1j!rbeh j` Dl!netmjbeh \dngbjhjiy $ystdas
3mldj Sjlnestmbi- Ygdb( Ygdrd ebl 6jw mt?s N!rrdbthy !sdl `jr Mbstr!ntmjb \gd :etmjbeh Njbvdbtmjb j` tgd "ssjnmetmjb `jr Dl!netmjbeh Njaa!bmnetmjbs ebl \dngbjhjiy
MS Sendt Ngerimbi <jldh .jr <!htmadlme $drvmnds:etmjbeh 2bmvdrsmty j` [weble
Srdsdrvetmjb j` e!lmjvms!eh adlm!as- Srjkhdas ebl ngehhdbidsShet`jra `jr "rngmvmbi ebl Srdsdrvetmjb j` "rt jb Dhdntrjbmn ebl Lmimteh <dlme
S5S \dngbjhjiy \rdbl ebl "++hmnetmjb tj 6jad :dtwjrDhdntrjbmns ebl \dhdnjaa!bmnetmjbs [dsderng Mbstmt!td 1j!rbeh
Sddr \j Sddr Nja+!tmbi # \gd Dvjh!tmjb j` e Lmsr!+tmvd \dngbjhjiyMlde Irj!+ S!khmsgmbi
Sddr#tj#Sddr $ystdas ebl "++hmnetmjbs)dnt!rd :jtds Mb Nja+!tdr $nmdbnd$+rmbidr Kdrhmb / 6dmldhkdri
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 4/20
@ddlkeno
Shdesd `ddh `rdd tj njbtent tgd e!tgjr m` yj! gevd eby ,!dstmjbs jr njaadbts& Cj!r `ddlken ms irdethy e++rdnmetdl&
Cj! neb njbtent tgd e!tgjr gdrd- www&E)".&nja
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 5/20
@jrdwjrl
Irddtmbis(
Mt ms wmtg irdet =jy tget M jbnd eiemb ldhvd mbtj tgd aystdrmj!s rdehas j` mb`jraetmjb& \gd tmld j` mb`jraetmjb irjws kyvest eaj!bts( ebl sgj!hl kd njbsmldrdl eb ma+jrtebt rdsj!rnd tget ms +rmndhdss& Ebjwhdlid sgj!hl kd !sdl wmsdhy `jtgd kdbd*t j` ehh ebl sgerdl wmtg dvdry jbd&
\gd a!smneh mbs+mretmjb `jr tgms i!mld ms Nge+dh $tmhd `rja tgd ehk!a $j!blnesthds ky Srdt4&
M wj!hl hmd tj tgeb $nerhdt Njdr `jr +rjvmlmbi essmstebnd wmtg tgd dlmtmbi j` tgd aeb!snrm+t ebl 1eads Levdy etKrjelnestmbi Yjrhl `jr ehhjwmbi ad tgd j++jrt!bmty tj nrdetd tgms i!mld&
Mt ms ay smbndrd gj+d tget tgd rdeldr *bls tgms i!mld kdbd*nmeh&
Levml Ngmhldrs
Ldndakdr 5';;
Sjsvddbj :dm 3mlaer&
M+se snmdbtme +jtdstes dst&
$dn!rmty neb jbhy kd engmdvdl tgrj!ig njbstebt ngebid( tgrj!ig lmsnerlmbi jhl mldes tget gevd j!thmvdl tgdmr!sd`!hbdss ebl ele+tmbi jtgdrs tj n!rrdbt `ents&
Ymhhmea 8& Lj!ihes
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 6/20
Mbldx
# Mbtrjl!ntmjb
# Shebbmbi
# Edy Sdrsjbbdh
# Sgysmneh
# $ystda
# .mrdwehh
# $j`twerd
# Sesswjrl
# .mhd \rebs`dr
# [dajtd "nndss # Njaaebl )mbd
# [dajtd "nndss # Ldstj+
# $ystda )jis
# Lete <ebeidadbt
# L8$ / LL8$ "ttens
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 7/20
Mbtrjluntmjb
\gd mbnrdesd j` nja+!tdr krdengds ebl gendr ettens nhderhy mblmnetds tget nja+!tdr sdn!rmty ms e vdry ma+jrtebtrdeha j` dx+drtmsd& \gdsd tgrdets jrmimbetd `rja mblmvml!ehs( n!ht!reh( sjnmeh( ebl +jhmtmneh ehmetmjbs es e adebs tjaebm+!hetd jr nrdetd gevjn&
$ystda sdn!rmty ms bjt eb dxent snmdbnd( k!t ms eb jbijmbi +rjndss& <eby es+dnts bddl tj kd njbsmldrdl tj dbs!rd+rj+dr ebl s!stembekhd sdn!rmty& \gd aebtre j` sdn!rmty sgj!hl kd es+mrdl tj ky dvdry jbd et tgd krjelnest stetmjb6endrs jr nja+!tdr aere!ldrs wmhh bjt lmsnrmambetd tj engmdvd tgdmr ijehs( dvdry jbd ms e +rmad teridt& $dn!rmty msjbhy es ijjl es tgd +dj+hd ma+hdadbtmbi mt& \gd hen j` db`jrndadbt j` sdn!rmty steblerls neb ehhjw irdet leaeid tjjnn!r( rdierlhdss j` gjw aeby aeb!ehs jr adajs erd nrdetdl&
Kjtg tgd nja+!tdr systda gjstmbi tgd adlme sdrvdr ebl tgd ent!eh adlme sdrvdr sj`twerd sgj!hl kd njbsmldrdld,!ehhy ma+jrtebt `jr aembtembmbi sdn!rmty& " adlme sdrvdr jr mts nja+!tdr gjst tget neb kd nja+rjamsdl jr krdengdlky !be!tgjrm4dl +drsjbs neb *bebnmehhy r!mb e krjelnestdr& \gms smt!etmjb neb ehsj kd dx+hjmtdl tj lmsnrdlmt tgdkrjelnestdr jr lrmvd ewey tgdmr e!lmdbnd&
$dn!rmty sterts wmtg tgd mblmvml!eh@ aed mt e gekmt tj kd sdn!rd ebl nja+!tdr njbsnmj!s&
\gmbo mt Hmvd mt !j mt
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 8/20
"hebbmb#
" ldtemhdl +heb sgj!hl kd nrdetdl tj j!thmbd tgd adtgjls `jr aembtembmbi sdn!rmty ebl mbmtmetmbi rdnjvdry `rja esystda `emh!rd& Dvdryjbd njbndrbdl sgj!hl rdvmdw tgd +rj+jsdl +heb +rmjr tj *behm4etmjb ebl +rjvmld mb+!t& 8bnd tgd+heb ges kddb *behm4dl( mt sgj!hl kd strmnthy db`jrndl&
\gms +heb sgj!hl dbnja+ess tgd `jhhjwmbi-
# Ldsmibetdl +drsjbbdh `jr adlme sdrvdr elambmstretmjb& Njbtent mb`jraetmjb # 6jad tdhd+gjbd b!akdr # Ndhh tdhd+gjbd b!akdr # D aemh ellrdss
# Njbtent mb`jraetmjb `jr systda elambmstretmjb j` rdajtdhy gjstdl nja+!tdrs& \rj!khd lds # \dhd+gjbd b!akdr # D aemh ellrdss 6dh+ lds # \dhd+gjbd b!akdr # D aemh ellrdss
# Njbtent mb`jraetmjb `jr bdtwjr elambmstretmjb j` !+hmb lete `ddl& \rj!khd lds # \dhd+gjbd b!akdr
# D aemh ellrdss 6dh+ lds # \dhd+gjbd b!akdr # D aemh ellrdss
# )jnetmjb j` ma+jrtebt systda ljn!adbtetmjb& )jimb +esswjrls 8+dretmbi systda aeb!ehs $j`twerd aeb!ehs
# )jnetmjb j` stjrdl ken !+ lete& .jr e systda rdnjvdry&
# )jnetmjb j` gerlwerd systda ljn!adbtetmjb& .jr hjneh nja+!tdr gjstdl sdrvdr&
# <dtgjls j` enndss tj hjneh bdtwjr njb*i!retmjb `enmhmtmds&
# <dtgjls j` enndss tj hjneh gjstdl nja+!tdr systda&
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 9/20
$dy "drsjbbdh
Mt ms ma+jrtebt tj ldsmibetd eb mblmvml!eh jr s+dnm*n mblmvml!ehs tj ted rds+jbsmkmhmty j` aembtembmbi tgd nja+!tdrsdrvdr gjst ebl adlme sdrvdr& \gdsd mblmvml!ehs sgj!hl kd +rj+drhy vdttdl tj dbs!rd hjyehty ebl elgdrdbnd tj tgdkrjelnest stetmjbs +jhmnmds&
\gdsd mblmvml!ehs sgj!hl gevd tgd `jhhjwmbi ,!ehm*netmjbs-
# Ebjwhdlid j` nja+!tdr systda `!bleadbtehs&# Ebjwhdlid j` nja+!tdr sj`twerd `!bleadbtehs&
# Ebjwhdlid j` bdtwjrmbi `!bleadbtehs&# Ebjwhdlid j` Mbtdrbdt `!bleadbtehs&
# Ebjwhdlid j` a!htmadlme lmstrmk!tmjb `!bleadbtehs&
# "kmhmty tj njb*i!rd ebl elambmstdr e hjneh adlme sdrvdr gjst nja+!tdr&# "kmhmty tj njb*i!rd ebl elambmstdr e rdajtd adlme sdrvdr gjst nja+!tdr&
# "kmhmty tj njb*i!rd ebl elambmstdr ehh adlme sdrvdr sj`twerd&# "kmhmty tj njb*i!rd ebl elambmstdr ehh adlme sdrvdr s!++jrt sj`twerd&
# "kmhmty tj njb*i!rd ebl elambmstdr e bdtwjr lete !+hmb&
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 10/20
"gysmneh
Sgysmneh sdn!rmty ms tgd *rst hmbd j` ld`dbsd eiembst !be!tgjrm4dl enndss jr !sd j` e nja+!tdr systda& \gms +rdvdbts!be!tgjrm4dl +dj+hd `rja iembmbi enndss tj tgd nja+!tdr systda&
# Dbs!rd tget tgd nja+!tdr gjstmbi tgd adlme sdrvdr ms mb e sdn!rd erde&
# Dbs!rd tget enndss tj tgd nja+!tdr gjstmbi tgd adlme sdrvdr ms hmamtdl tj +drsjbbdh tget gevd e vehml bddl&
# Dbs!rd tget tgd nja+!tdr gjstmbi tgd adlme sdrvdr ms njbbdntdl tj eb !bmbtdrr!+tekhd +jwdr s!++hy& \gms wmhh +rjvmld njbtmb!j!s sdrvmnd m` tgd +rmaery +jwdr +rjvmldr `emhs&
# Dbs!rd tget tgd hjnetmjb j` tgd adlme sdrvdr ms wdhh vdbtmhetdl ebl njjhdl&
# Dbs!rd tget tgd nja+!tdr gjstmbi tgd adlme sdrvdr ms njbbdntdl tj eb ehtdrbetd bdtwjr +rjvmldr& \gms wmhh +rjvmld njbtmb!j!s sdrvmnd m` tgd +rmaery bdtwjr +rjvmldr `emhs&
# Dbs!rd tget ehh dhdntrmneh se`dty njbsmldretmjbs erd tedb tj +rdvdbt leaeid tj tgd nja+!tdr d,!m+adbt&
# )ji j!t j` tgd nja+!tdr gjstmbi tgd adlme sdrvdr wgdb +drsjbbdh erd +gysmnehhy ewey `rja tgd nja+!tdr systda&
# )jn tgd nja+!tdr snrddb wgdb +drsjbbdh erd bjt lmrdnthy mb `rjbt j` tgd nja+!tdr systda&
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 11/20
^ystda
$ystda sdn!rmty ms tgd sdnjbl hmbd j` ld`dbsd eiembst !be!tgjrm4dl enndss jr !sd j` e nja+!tdr systda& \gms wmhh ehhjwtgd nja+!tdr tj +rj+drhy `!bntmjb es +rjkhdas wmtg tgd nja+!tdr j+dretmbi systda erd *xdl wmtg !+irelds&
# Edd+ tgd j+dretmbi systda !+ tj letd& Mt ms dxtrdadhy ma+jrtebt tj +etng ebl !+letd tgd nja+!tdr systda jb e rdi!her kesms@ ds+dnmehhy nrmtmneh !+letds&
# Lj bjt mbstehh sj`twerd tget neb ehhjw !be!tgjrm4dl rdajtd !sdrs tj enndss tgd nja+!tdr jr ehhjw aehmnmj!s sj`twerdtj ajlm`y tgd nja+!tdr systda&
# \6M:E KD.8[D C82 N)MNE&
$ystda sdn!rmty bjtm*netmjbs
8nmeh +jmbts j` mb`jraetmjb `jr ae=jr j+dretmbi systdas-
)mb!x [dlget $dn!rmtyenndss&rdlget&nja/sdn!rmty/!+letds
)mb!x .dljre $dn!rmtyhmsts&`dljre+rj=dnt&jri/aemhaeb/hmstmb`j/sdn!rmty
)mb!x Ldkmeb $dn!rmtyhmsts&ldkmeb&jri/ldkmeb#sdn!rmty#ebbj!bnd/
)mb!x 2k!bt! $dn!rmtywww&!k!bt!&nja/!sb
)mb!x Idbtjj $dn!rmtywww&idbtjj&jri/sdn!rmty/db/ihse/mbldx&xah
8+dbK$L $dn!rmtywww&j+dbksl&jri/sdn!rmty>ah
.rddK$L $dn!rmtysdn!rmty&`rddksl&jri/
:dtK$L $dn!rmtywww&bdtksl&jri/s!++jrt/sdn!rmty/elvmsjry>ah
"++hd $dn!rmtyssh&e++hd&nja/s!++jrt/sdn!rmty/
Ymbljws $dn!rmtytdngbdt&amnrjsj`t&nja/db#!s/sdn!rmty/k!hhdtmb
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 12/20
@mrd %ehh
.mrdwehh sdn!rmty ms tgd tgmrl hmbd j` ld`dbsd eiembst !be!tgjrm4dl enndss jr !sd j` e nja+!tdr systda& \gms e++hmnetmjb+rdvdbts !be!tgjrm4dl rdajtd enndss tj e nja+!tdr !smbi j+db lete njaa!bmnetmjbs +jrts&
Mt ms eksjh!tdhy vmteh tj +rj+drhy njb*i!rd tgd nja+!tdr *rdwehh& " +jjrhy njb*i!rdl *rdwehh ms wjrsd tgeb gevmbi bj*rdwehh et ehh kdne!sd mt +rjvmlds e `ddhmbi j` `ehsd sdn!rmty&
M` tgd adlme sdrvdr ms hjnetdl jb e rdajtd bdtwjr sdrvdr( aed s!rd tget tgd `jhhjwmbi +jrts erd j+db-GLd+dblmbi tgd sdrvmnds !sdl&
5' .mhd \rebs`dr Srjtjnjh G`t+ Lete trebs`dr5; .mhd \rebs`dr Srjtjnjh G`t+ Njbtrjh Gnjaaebl
55 $dn!rd $gdhh G$$6
0' 6y+drtdxt \rebs`dr Srjtjnjh Ggtt+99% 6y+drtdxt \rebs`dr Srjtjnjh jvdr $$)/\)$ Ggtt+s
>;% [dajtd )jimb Grhjimb>;9 [dajtd $gdhh Grsg%%0F [dajtd Ldstj+ Grldstj+
OOOO Ldsmibetdl +jrt b!akdr `jr adlme sdrvdr
:8\D-M` tgd .mrdwehh ges kddb entmvetdl wmtgj!t njb*i!rmbi tgd +rj+dr +jrts `jr rdajtd enndss G`t+(ssg(rhjimb(rsg jr rldstj+tgdb tgd nja+!tdr a!st kd aeb!ehhy rdnjb*i!rdl et tgd rdajtd hjnetmjb&
M` tgd adlme sdrvdr ms hjnetdl jb e hjneh bdtwjr sdrvdr( aed s!rd tget tgd `jhhjwmbi +jrts erd j+db-GLd+dblmbi tgd sdrvmnds !sdl&
0' 6y+drtdxt \rebs`dr Srjtjnjh Ggtt+99% 6y+drtdxt \rebs`dr Srjtjnjh jvdr $$)/\)$ Ggtt+s
OOOO Ldsmibetdl +jrt b!akdr `jr adlme sdrvdr
" sneb j` tgd nja+!tdr systda gjstmbi tgd adlme sdrvdr sgj!hl kd njbl!ntdl tj vdrm`y wgmng +jrts erd j+db ebl
nhjsdl& \gms neb kd ennja+hmsgdl wmtg eb jbhmbd +jrt snebbdr( ebl tgms wmhh dbs!rd tget tgd *rdwehh ges kddb +rj+drhynjb*i!rdl ebl ms wjrmbi njrrdnthy&
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 13/20
^j&twerd
$j`twerd sdn!rmty ms tgd `j!rtg hmbd j` ld`dbsd eiembst !be!tgjrm4dl enndss jr !sd j` e nja+!tdr systda& \gms wmhehhjw tgd adlme sdrvdr sj`twerd ebl adlme sdrvdr s!++jrt sj`twerd tj +rj+drhy `!bntmjb es +rjkhdas wmtg tgd sj`twerderd *xdl wmtg !+irelds
# <ed s!rd tget tgd adlme sdrvdr sj`twerd ms mbstehhdl !bldr tgd !sdr ennj!bt&
# <ed s!rd tget tgd adlme sdrvdr s!++jrt sj`twerd ms mbstehhdl !bldr tgd !sdr ennj!bt&
# :dvdr mbstehh njaajb j+dretmjbeh sj`twerd !bldr tgd elambmstretmvd jr rjjt ennj!bt&
# Lj bjt r!b njaajb tess es e rjjt jr elambmstretmvd !sdr&
# <ed s!rd tget tgd adlme sdrvdr sj`twerd ms !+ tj letd& Mbstehh +etngds ebl !+irelds maadlmetdhy !+jb bjtm*netmjb&
# <ed s!rd tget ehh adlme sdrvdr s!++jrt sj`twerd ms !+ tj letd& Mbstehh +etngds ebl !+irelds maadlmetdhy !+jb bjtm*netmjb&
# $!ksnrmkd tj tgd adlme sdrvdr sj`twerd?s ebbj!bndadbts hmst `jr sdn!rmty jr aembtdbebnd mss!ds&
# $!ksnrmkd tj tgd adlme sdrvdr s!++jrt sj`twerd?s ebbj!bndadbts hmst `jr sdn!rmty jr aembtdbebnd mss!ds&
# Sdrmjlmnehhy ngdn tgd adlme sdrvdr sj`twerd?s wdksmtd `jr sdn!rmty jr aembtdbebnd mss!ds&
# Sdrmjlmnehhy ngdn tgd adlme sdrvdr s!++jrt sj`twerd?s wdksmtd `jr sdn!rmty jr aembtdbebnd mss!ds&
Idbdreh sj`twerd ebbj!bndadbts-
2bmtdl $tetds Nja+!tdr Dadridbny [delmbdss \dea
Nykdr $dn!rmty K!hhdtmbswww&!s#ndrt&ijv/n!rrdbt
Nykdr $dn!rmty "hdrtswww&!s#ndrt&ijv/nes/tdngehdrts/mbldx>ah
Nykdr $dn!rmty K!hhdtmbswww&!s#ndrt&ijv/nes/k!hhdtmbs
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 14/20
"esswjrl
Sesswjrl sdn!rmty ms tgd *`tg hmbd j` ld`dbsd eiembst !be!tgjrm4dl enndss jr !sd j` e nja+!tdr systda& \gms ms !s!ehhytgd wdedst hmb mb systda sdn!rmty& \gd +!r+jsd j` e +esswjrl ms tj +rdvdbt !be!tgjrm4dl +dj+hd `rja iembmbi enndsstj e nja+!tdr& 2smbi sma+hd jr njaajb wjrls `jr +esswjrls ms tgd d,!mvehdbt j` bjt !smbi eby +esswjrl +rjtdntmjb&
# $dhdnt strjbi +esswjrls `jr tgd "L<M:M$\["\8[ / [88\ hjimb& \gms +esswjrl sgj!hl njbtemb e ambma!a j` ;>ngerentdrs( tget sgj!hl mbnh!ld et hdest 5 !++dr nesd hdttdrs( 5 hjwdr nesd hdttdrs( 5 b!akdrs ebl twj s+dnmengerentdrs&
# $dhdnt strjbi +esswjrls `jr tgd 2$D[ hjimb& \gms +esswjrl sgj!hl njbtemb e ambma!a j` ;> ngerentdrs( tget sgj!hlmbnh!ld et hdest 5 !++dr nesd hdttdrs( 5 hjwdr nesd hdttdrs( 5 b!akdrs ebl twj s+dnmeh ngerentdrs&
# $dhdnt strjbi +esswjrls `jr tgd <DLM" $D[3D[ sj`twerd hjimb& \gms +esswjrl sgj!hl njbtemb e ambma!a j` ;>ngerentdrs( tget sgj!hl mbnh!ld et hdest 5 !++dr nesd hdttdrs( 5 hjwdr nesd hdttdrs( 5 b!akdrs ebl twj s+dnmengerentdrs&
# Lj bjt !sd mldbtmneh +esswjrls `jr systda hjimbs& [jjt H LmAdrdbt +esswjrl
2sdr H LmAdrdbt +esswjrl <dlme sdrvdr H LmAdrdbt +esswjrl
# Dstekhmsg e sdt rj!tmbd `jr ngebimbi ")) systda +esswjrls jb e rdi!her kesms& [jjt 2sdr
<dlme sdrvdr
# Lj bjt stjrd enndss +esswjrls jb tgd nja+!tdr&
# <embtemb +gysmneh sdn!rmty j` ehh enndss +esswjrl mb`jraetmjb&
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 15/20
@mhd \rebs&dr
Nerd sgj!hl kd !sdl mb tgd adtgjl j` !+hjelmbi lete tj e rdajtd nja+!tdr gjstmbi tgd adlme sdrvdr&
.mhd \rebs`dr Srjtjnjh G.\S ms e bdtwjr +rjtjnjh !sdl tj trebs`dr *hds `rja jbd gjst tj ebjtgdr gjst jvdr e nja+!tdrnjaa!bmnetmjbs bdtwjrs& \gms +rjtjnjh ljds bjt !sd dbnry+tdl lete trebs`dr( wgmng nj!hl ehhjw tgd rdajtdnjhhdntmjb j` sdbsmtmvd hjimb mb`jraetmjb jr lete&
\gdrd erd ehtdrbetmvds `jr +rjvmlmbi sdn!rd lete trebs`dr tj rdajtd nja+!tdr systdas&
$dn!rd $gdhh G$$6 ms e bdtwjr +rjtjnjh `jr sdn!rd lete njaa!bmnetmjb kdtwddb twj bdtwjrdl nja+!tdrs& \gms+rjtjnjh ehhjws rdajtd sgdhh sdrvmnds jr njaaebl dxdn!tmjb ebl jtgdr sdn!rd bdtwjr sdrvmnds tj kd mbmtmetdl !smbidbnry+tmjb&
$dn!rd .\S G$.\S ms eb e++hmnetmjb tget !sds $$6 tj trebs`dr lete *hds& Mt dbnry+ts kjtg njaaebls ebl lete !bhmdrdi!her .\S& \gms +rdvdbts +esswjrls ebl sdbsmtmvd mb`jraetmjb `rja kdmbi trebsamttdl mb tgd nhder jvdr tgd bdtwjr
.\S jvdr $$6 Gbjt $.\S ms tgd +rentmnd j` t!bbdhmbi e bjraeh .\S sdssmjb tgrj!ig eb $$6 njbbdntmjb&
\gd `jhhjwmbi sj`twerd e++hmnetmjbs neb kd !sdl `jr sdn!rd *hd trebs`dr-
8+db$$6
\gms ms e .[DD vdrsmjb j` tgd $$6 njbbdntmvmty tjjh& 8+db$$6 dbnry+ts ehh tren Gmbnh!lmbi +esswjrls tj dAdntmvdhydhmambetd devdslrj++mbi( njbbdntmjb gm=enmbi( ebl jtgdr ettens& "llmtmjbehhy( 8+db$$6 +rjvmlds sdn!rd t!bbdhmbi
ne+ekmhmtmds ebl sdvdreh e!tgdbtmnetmjb adtgjls( ebl s!++jrts ehh $$6 +rjtjnjh vdrsmjbs&www&j+dbssg&nja
S!\\C
\gms ms e `rdd ebl j+db sj!rnd tdrambeh da!hetjr e++hmnetmjb wgmng neb ent es e nhmdbt `jr $$6( ebl rdajtd hjimbGrhjimb& Mt neb kd !sdl wmtg tgd Ymbljws ebl 2bmx j+dretmbi systdas&www&ngmer&irddbdbl&jri&!/Bsitetgea/+!tty
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 16/20
'dajtd Enndss ( Njaaebl Hmbd
\gd njaaebl hmbd j+tmjb j` e rdajtd nja+!tdr systda neb kd enndssdl tj elambmstdr tgd gjstdl adlme sdrvdr eblnja+!tdr systda&
\gd `jhhjwmbi sj`twerd e++hmnetmjbs neb kd !sdl `jr rdajtd enndss-
[dajtd hjimb Grhjimb ms e sj`twerd !tmhmty `jr 2bmx#hmd nja+!tdr j+dretmbi systdas tget ehhjws !sdrs tj hji mb jb erdajtd gjst vme e nja+!tdr njaa!bmnetmjbs bdtwjr& \gd rdajtd gjst a!st kd r!bbmbi e rhjimb ledajb&
[dajtd sgdhh Grsg ms e njaaebl hmbd sj`twerd !tmhmty tget neb dxdn!td !sdr sgdhh njaaebls jb e rdajtdhy bdtwjrdlnja+!tdr& \gd rdajtd systda a!st kd r!bbmbi tgd rsg ledajb&
:dmtgdr rhjimb jr rsg +rjvmld dbnry+tdl lete sdn!rmty& Mt ms gmighy rdnjaadbldl tget tgdsd e++hmnetmjbs erd !sdl wmtg e$dn!rd $gdhh G$$6 njbbdntmjb&
8+db$$6
\gms ms e .[DD vdrsmjb j` tgd $$6 njbbdntmvmty tjjh& 8+db$$6 dbnry+ts ehh tren Gmbnh!lmbi +esswjrls tj dAdntmvdhydhmambetd devdslrj++mbi( njbbdntmjb gm=enmbi( ebl jtgdr ettens& "llmtmjbehhy( 8+db$$6 +rjvmlds sdn!rd t!bbdhmbine+ekmhmtmds ebl sdvdreh e!tgdbtmnetmjb adtgjls( ebl s!++jrts ehh $$6 +rjtjnjh vdrsmjbs&www&j+dbssg&nja
S!\\C
\gms ms e `rdd ebl j+db sj!rnd tdrambeh da!hetjr e++hmnetmjb wgmng neb ent es e nhmdbt `jr $$6( ebl rdajtd hjimbGrhjimb& Mt neb kd !sdl wmtg tgd Ymbljws ebl 2bmx j+dretmbi systdas&www&ngmer&irddbdbl&jri&!/Bsitetgea/+!tty
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 17/20
'dajtd Enndss ( !dsotj)
" ire+gmneh rd+rdsdbtetmjb j` e rdajtd nja+!tdr systda ldstj+ tget neb kd enndssdl tj elambmstdr tgd rdajtdhygjstdl adlme sdrvdr ebl nja+!tdr systda&
\gd `jhhjwmbi sj`twerd e++hmnetmjbs neb kd !sdl `jr rdajtd enndss-
[dajtd Ldstj+ Srjtjnjh G[LS +rjvmlds e !sdr wmtg e ire+gmneh mbtdr`end j` e rdajtdhy bdtwjrdl nja+!tdr&www&rldstj+&jri
[LS ljds bjt +rjvmld dbnry+tdl lete sdn!rmty& Mt ms elvmsekhd tj !sd tgms e++hmnetmjbs wmtg e $dn!rd $gdhh G$$6njbbdntmjb&
8+db$$6 ms e .[DD vdrsmjb j` tgd $$6 njbbdntmvmty tjjh& 8+db$$6 dbnry+ts ehh tren Gmbnh!lmbi +esswjrls tjdAdntmvdhy dhmambetd devdslrj++mbi( njbbdntmjb gm=enmbi( ebl jtgdr ettens& "llmtmjbehhy( 8+db$$6 +rjvmlds sdn!rdt!bbdhmbi ne+ekmhmtmds ebl sdvdreh e!tgdbtmnetmjb adtgjls( ebl s!++jrts ehh $$6 +rjtjnjh vdrsmjbs&www&j+dbssg&nja
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 18/20
^ystda Hj#s
<jbmtjrmbi tgd gjst nja+!tdr ebl adlme sdrvdr systda hjis neb +rjvmld eb maadlmetd mblmnetmjb j` systda jrsj`twerd?s krdeng( `e!ht jr trj!khd&
<jbmtjr tgd gjst nja+!tdr systda hjis `jr tgd `jhhjwmbi mblmnetmjbs-
# 2b!s!eh entmvmty
# 6erlwerd `e!ht
# $j`twerd `e!ht
<jbmtjr tgd adlme sdrvdr hjis `jr tgd `jhhjwmbi mblmnetmjbs-
# 2b!s!eh entmvmty
# $j`twerd `e!ht
# :dtwjr `e!ht
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 19/20
!ete Aebe#dadbt
\gms +rjvmlds tgd ekmhmty tj rdstjrd systda j+dretmjb m` tgd mbtdirmty j` tgd gerlwerd jr sj t̀werd ges `emhdl&
# Ken !+ ehh gjst nja+!tdr systda *hds jb e rj!tmbd kesms&
# Ken !+ ehh adlme sdrvdr sj`twerd *hds jb e rj!tmbd kesms&
# Ken !+ ehh adlme sdrvdr s!++jrt sj`twerd *hds jb e rj!tmbd kesms&
# Edd+ ehh ma+jrtebt ljn!adbtetmjb rdelmhy evemhekhd&
# Edd+ ehh hjimb mb`jraetmjb sdn!rd&
# $tjrd nja+!tdr ken !+ lete jb rdajvekhd adlme&
# $tjrd sj`twerd ken !+ lete jb rdajvekhd adlme&
# $tjrd sdbsmtmvd lete jb rdajvekhd adlme&
# $tjrd rdajvekhd adlme mb e sdn!rdl erde&
# )mamt enndss tj tgd stjrdl rdajvekhd adlme&
8/3/2019 Multimedia Server Security Guide
http://slidepdf.com/reader/full/multimedia-server-security-guide 20/20
!*^ + !!*^ Ettenos
" Ldbmeh 8` $drvmnd etten GLj$ etten jr Lmstrmk!tdl Ldbmeh 8` $drvmnd etten GLLj$ etten ms eb ettda+t tj aed enja+!tdr rdsj!rnd !bevemhekhd& \gd +rmaery adtgjl j` etten mbvjhvds set!retmbi tgd teridt nja+!tdr wmtg dxtdrbenjaa!bmnetmjbs rd,!dsts& \gms +rdvdbts tgd nja+!tdr `rja rds+jblmbi tj hdimtmaetd tren( jr rds+jblmbi sj shjwhytget mt ms rdbldrdl dAdntmvdhy !bevemhekhd&
"vemhekhd sj`twerd tj +rdvdbt L8$ / LL8$ "ttens-
ajlsdn!rmty \gms ms e ty+d j` *rdwehh tget njbtrjhs mb+!t( j!t+!t( ebl/jr enndss `rja( tj( jr ky eb e++hmnetmjb jr sdrvmnd& Mt j+dretdsky ajbmtjrmbi ebl +jtdbtmehhy khjnmbi tgd mb+!t( j!t+!t( jr systda sdrvmnd nehhs wgmng lj bjt addt tgd njb*i!rdl+jhmny j` tgd *rdwehh&www&ajlsdn!rmty&jri
$tetd`!h Sendt Mbs+dntmjb .mrdwehh" )jimb/Mbtr!smjb Ldtdntmjb ebl sdn!rmty e++hmnetmjb `jr )mb!x sdrvdrs& \gms ms e ty+d j` .mrdwehh tget dd+s tren j` tgdstetd j` bdtwjr njbbdntmjbs trevdhmbi enrjss mt& \gd *rdwehh ms +rjireaadl tj lmstmbi!msg hdimtmaetd +endts `jrlmAdrdbt ty+ds j` njbbdntmjbs& 8bhy +endts aetngmbi e bjwb entmvd njbbdntmjb wmhh kd ehhjwdl ky tgd *rdwehh&Sendts tget lj bjt aetng e bjwb entmvd njbbdntmjb wmhh kd rd=dntdl&www&njb*isdrvdr&nja/n+/ns`>ah
"+engd 6\\S sdrvdr ajl!hds
ajl7dvesmvd
\gms ms ldsmibdl tj +rdvdbt 6\\S Lj$ jr LLj$ etten jr kr!td `jrnd ettens&
ajl7keblwmltg \gms ms e ldsmibdl tj hmamt +dr njbbdntmjb keblwmltg !sd&
ajl7m+njbbhmamt \gms ms e ldsmibdl tj hmamt sma!htebdj!s njbbdntmjbs `rja tgd sead MS ellrdss&
