Re: XPE Security - virus and hacker attacs

From: KM (konstmor_at_nospam_yahoo.com)
Date: 07/21/04


Date: Wed, 21 Jul 2004 15:38:57 -0700

JC,

Yes, this is true and there are some good intrusion detection system. You can also (and this would be advised) built-in and turn on
a firewall (not only MS ICF but there are some good firewalls available for XP/XPe), close most network ports as much as possible,
etc.

Although, I believe, the best standalone protection system would be "your own" (non public) implementation. E.g., replacing TCP/IP
stack, having some encryptions in your custom protocol implementations, etc.

But hackers' minds are not stuck. Any system could be broken (intentionally, or with a virus). So, only consistent system monitoring
is and keeping up-to-date is a "absolute" choice (if there is such).

Anyway.. I am not a security expert so I don't talk about the Windows security here :-)

-- 
 Regards,
        KM, BSquare Corp.
> Konstantin,
>
> Great Ideas... The other thought that comes to mind is a 3rd party
> intrustion detection system. there are tools out there that can "stand
> alone" and help from several of the more nasty network borne viruses...
> contact me offline, and I can make some suggestions.
>
> Regards,
> JC
>
> -- 
> JC- BSquare Corp.
> If you wish to reply directly to me, remove the <nospam_ > from the address.
>
>
> "KM" <konstmor@nospam_yahoo.com> wrote in message
> news:ubU7r12bEHA.1000@TK2MSFTNGP12.phx.gbl...
> > Carl ,
> >
> > > When my XPE system is delivered, it will "live alone" so no-one will
> update
> > > virus checkers or update the XPE system when new viruses emerges.
> > > How can I make sure that my XPE system hanging on a network connected to
> the
> > > internet, is robust against virus and hacker activity ?
> >
> > Nobody can guarantee you that the system on open network is robust enough,
> especially considering the fact that new viruses, worms
> > and malicious software appers each day.
> > Having updatable virus DB always helps and is the best choice since you
> can rely on an expert source for checking your system daily
> > (weekly, monthly, etc.).
> >
> > > I am using the EWF with FLASH. Does the write protection help preventing
> virus infections ?
> >
> > A bit. Consider these negative facts:
> >     - there may be viruses out there that know how to disable/commit EWF
> >     - some viruses may change MBR (or unprotected partitions data) and
> therefore easy pass around EWF
> >     - there are many virues out there that do not require a client machine
> reboot and your system gets infected each time you launch
> > OS (some of our customers suffered from this)
> >
> > > How can I remove the Internet explorer application and the mail systems
> ?
> >
> > Why not? This is componentized OS.
> >
> > > (It seems like they are unremovable - although I remove the components
> from
> > > my design, the applications is still found in my image)
> >
> > Check if "Auto-Resolve Dependencies" option is turned off in TD.
> >
> > -- 
> >  Regards,
> >         KM, BSquare Corp.
> >
> >
> >
>
>


Relevant Pages

  • RE: Using viruses in pen-test
    ... I wonder if there is some type of "fake" virus you could use in this case. ... David A. Swafford, Network Engineer ... I wish to know your views on "Using viruses in pen-test"I ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • Re: need other security?
    ... Too bad most AV only catches new viruses after the fact. ... limited user account on XP or 2K. ... Symantec's "Norton Internet Security" firewall blocks a ... Exchange network, but not when you're outside of said network. ...
    (microsoft.public.security)
  • Re: AntiVirus
    ... implement signatures for new viruses discovered. ... > anti-virus testing laboratories (ICSA Labs, West Coast Labs, Virus ... who employ multiple scanning engines for the same reason that it is ... network location to another. ...
    (Security-Basics)
  • Re: Outlook and irrational virus fears
    ... >product is incredibly virus prone. ... we receive email viruses here all of the time. ... >A firewall does NOT stop email. ... Outlook 2003 is an excelent program and i would strongly ...
    (microsoft.public.outlook)
  • RE: Probably a silly Question
    ... The two most popular categories of viruses right now are email ... and network worms like Blaster. ... Reduced permissions can prevent a few things, like it may keep the virus ...
    (microsoft.public.windows.server.security)