Cargando…

Increasing Windows security by hardening PC configurations

Over 8000 Windows PCs are actively used on the CERN site for tasks ranging from controlling the accelerator facilities to processing invoices. PCs are managed through CERN's Computer Management Framework and Group Policies, with configurations deployed based on machine sets and a lot of autonom...

Descripción completa

Detalles Bibliográficos
Autores principales: Martin Zamora, Pablo, Kwiatek, Michal, Bippus, Vincent Nicolas, Cruz Elejalde, Eneko
Lenguaje:eng
Publicado: 2019
Materias:
Acceso en línea:https://dx.doi.org/10.1051/epjconf/201921408019
http://cds.cern.ch/record/2689880
_version_ 1780963746137505792
author Martin Zamora, Pablo
Kwiatek, Michal
Bippus, Vincent Nicolas
Cruz Elejalde, Eneko
author_facet Martin Zamora, Pablo
Kwiatek, Michal
Bippus, Vincent Nicolas
Cruz Elejalde, Eneko
author_sort Martin Zamora, Pablo
collection CERN
description Over 8000 Windows PCs are actively used on the CERN site for tasks ranging from controlling the accelerator facilities to processing invoices. PCs are managed through CERN's Computer Management Framework and Group Policies, with configurations deployed based on machine sets and a lot of autonomy left to the end-users. While the generic central configuration works well for the majority of the users, a specific hardened PC configuration is now provided for users who require stronger resilience against external attacks. This paper describes the technical choices and configurations involved and discusses the effectiveness of the hardened PC approach.
id cern-2689880
institution Organización Europea para la Investigación Nuclear
language eng
publishDate 2019
record_format invenio
spelling cern-26898802022-08-10T12:23:40Zdoi:10.1051/epjconf/201921408019http://cds.cern.ch/record/2689880engMartin Zamora, PabloKwiatek, MichalBippus, Vincent NicolasCruz Elejalde, EnekoIncreasing Windows security by hardening PC configurationsComputing and ComputersInformation Transfer and ManagementOver 8000 Windows PCs are actively used on the CERN site for tasks ranging from controlling the accelerator facilities to processing invoices. PCs are managed through CERN's Computer Management Framework and Group Policies, with configurations deployed based on machine sets and a lot of autonomy left to the end-users. While the generic central configuration works well for the majority of the users, a specific hardened PC configuration is now provided for users who require stronger resilience against external attacks. This paper describes the technical choices and configurations involved and discusses the effectiveness of the hardened PC approach.CERN-IT-2019-003Poster-2018-664oai:cds.cern.ch:26898802019-09-17
spellingShingle Computing and Computers
Information Transfer and Management
Martin Zamora, Pablo
Kwiatek, Michal
Bippus, Vincent Nicolas
Cruz Elejalde, Eneko
Increasing Windows security by hardening PC configurations
title Increasing Windows security by hardening PC configurations
title_full Increasing Windows security by hardening PC configurations
title_fullStr Increasing Windows security by hardening PC configurations
title_full_unstemmed Increasing Windows security by hardening PC configurations
title_short Increasing Windows security by hardening PC configurations
title_sort increasing windows security by hardening pc configurations
topic Computing and Computers
Information Transfer and Management
url https://dx.doi.org/10.1051/epjconf/201921408019
http://cds.cern.ch/record/2689880
work_keys_str_mv AT martinzamorapablo increasingwindowssecuritybyhardeningpcconfigurations
AT kwiatekmichal increasingwindowssecuritybyhardeningpcconfigurations
AT bippusvincentnicolas increasingwindowssecuritybyhardeningpcconfigurations
AT cruzelejaldeeneko increasingwindowssecuritybyhardeningpcconfigurations