Home Esplora Aiuto
Accedi
RomanZenchenko
/
up
1
0
Forka 0
File
Albero (Tree): 0441b069dd
Rami (Branch) Tag
up
/
ЭАСвЗИ
/
Лекции
/
П2.5.300_Разграничение_доступа
/
Panteleev11.md

Panteleev11.md 8.4 KB
Cronologia Originale

Windows

Windows (. . 1.4). SD (security descriptor), :

  • (SID) ;
  • ( Windows );
  • (discretionary access control list DACL);
  • (system access control list - SACL). SACL . 2.4. DACL , . , , .

DACL (access control entry ) . :

  • SID , ;
  • (access mask AM), ;
  • ;
  • , . DACL , (Access- allowed ), , (Access-denied ). , , .

() . Windows , () (generic) . , , , . . , , , DACL , . .

. :

  1. :
  2. ( );
  3. ( , , );
  4. ( ( ), ( ), , , , );
  5. ( ); , , -. , , . , , ;
  6. ( ( ), , , , );
  7. ( ( ), ( ), , , , ).
  8. ( ):
  9. ( );
  10. ( , , , );
  11. ( , ).
  12. yindows ( ):
  13. ( );
  14. ( , , , ). , . , . , .

. . . , , .

ѻ. ( ) , . , . .

( , . . 2.2).

. , (, , ).

, MAXIMUM_ ALLOWED. , . MAXIM UMALLOWED DACL.

, DACL, 32 . 16 , 16 23 , 24 ACCESSJSYSTEMSECURITY (. . 2.4), 25 - MAXIMUM ALLOWED, 26 27 28 31 , .

, , LSA (. . 2.1). LSA (security reference monitor SRM), DACL SD R (. 2.10). SRM R, LSA , .

(desired access mask granted access mask).

. https://abuzov.com/razgranichenie-prav-dostupa-v-windows/ https://studref.com/363014/informatika/razgranichenie_dostupa_obektam_operatsionnoy_sisteme_windows https://studfile.net/preview/1503506/page:18/