POSTECH 사용자PC 보안가이드

1 H E M O S-1- POSTECH PC 2014 3 H E M O S-2- 12014. 03 279-251423PC H E M O S PC DDoS PC PC PC PC / PC PC PC Windows 7 .PC H E M O S PC 1. - .. - 2. - .. - : - 3.

2 - - 7. - /P2P - PC - / 5. - / / PW- 6. - - - PC PC PC 4. - - - - GUEST PC H E M O S1. Windows MS Office . , / . Windows MS Office - Windows Update - - - Internet Explorer 9 JAVA/Adobe - PC Windows XP SP3 Office 2003 2014 4 8 OS PC H E M O S2.

3 , PC . - ( ) . V3, - PC (USB ) (Windows 7 )- regedit - HKEY_CURRENT_USER\SOFTWARE\Microsoft\Win dows\CurrentVersion\policies\Explorer\No DriveTypeAutorun - NoDriveTypeAutorun 0xFF - - ADMIN$, C$, D$, IPC$ [AhnLab V3 ][AhnLab V3 ]3 3 5 PC H E M O S3.

4 - ( ) [ ] Microsoft SW OS . / - - ( 141 ) - - - / - - OS Windows 8 Enterprise AhnLab V3 Net for Windows Server V3 Internet Security OAMicrosoft Office 2013 2010 AdobePhotoshop CS 6 Flash Pro CS6 Acrobat Professional XI SAS ( )Xmanager Enterprise AlTools( , , ( FTP), , , , , )

5 [ ]- PC PC / PC H E M O S4. PC PC . - . - - : : 10 : - : : (0~24) : 90 : 8 : 1 : GUEST Windows Guest.

6 GUEST - GUEST Guest PC H E M O S5.. - , , 9 9 ..[ ][ ] + + 9 1 PC H E M O S6. (1/2) PC . - / , - : WPA2, : AES - SSID URL : PC - - Windows PC H E M O S6.

7 (2/2) PC . Well-Known Port(3389 ) 1. (administrator) PC .2. (administrator, user ) (Brute-force Attack) . - - - - - 3. 3389 . - -regedit KEY_LOCAL_MACHINE SYSTEM CurrentControlSet Control TerminalServer WinStations RDP-Tcp PortNumber 4.

8 IP IP IP . -Windows - - - - IP 5.. - - - - - , - - - PC H E M O S7. PC .P2P P2P PC /P2P PC PC PW / - HEMOS . URL - URL (SMS) PC H E M O S PC PC Windows XP, Vista, 7 PC / PC , PC PC.

9 PC PC - ( ) ( )- POVIS PC / PC 10 50% PC PC 1 ? 2 ? 3 , MS Office ? 4 ? 5 Windows 8 ? 6 Windows 1 ? 7 10 ? 8 ? 9 USB ? 10 (3 ) ActiveX ?