Cargando…
Increasing Windows security by hardening PC configurations
Over 8000 Windows PCs are actively used on the CERN site for tasks ranging from controlling the accelerator facilities to processing invoices. PCs are managed through CERN's Computer Management Framework and Group Policies, with configurations deployed based on machine sets and a lot of autonom...
Autores principales: | , , , |
---|---|
Lenguaje: | eng |
Publicado: |
2019
|
Materias: | |
Acceso en línea: | https://dx.doi.org/10.1051/epjconf/201921408019 http://cds.cern.ch/record/2689880 |
_version_ | 1780963746137505792 |
---|---|
author | Martin Zamora, Pablo Kwiatek, Michal Bippus, Vincent Nicolas Cruz Elejalde, Eneko |
author_facet | Martin Zamora, Pablo Kwiatek, Michal Bippus, Vincent Nicolas Cruz Elejalde, Eneko |
author_sort | Martin Zamora, Pablo |
collection | CERN |
description | Over 8000 Windows PCs are actively used on the CERN site for tasks ranging from controlling the accelerator facilities to processing invoices. PCs are managed through CERN's Computer Management Framework and Group Policies, with configurations deployed based on machine sets and a lot of autonomy left to the end-users. While the generic central configuration works well for the majority of the users, a specific hardened PC configuration is now provided for users who require stronger resilience against external attacks. This paper describes the technical choices and configurations involved and discusses the effectiveness of the hardened PC approach. |
id | cern-2689880 |
institution | Organización Europea para la Investigación Nuclear |
language | eng |
publishDate | 2019 |
record_format | invenio |
spelling | cern-26898802022-08-10T12:23:40Zdoi:10.1051/epjconf/201921408019http://cds.cern.ch/record/2689880engMartin Zamora, PabloKwiatek, MichalBippus, Vincent NicolasCruz Elejalde, EnekoIncreasing Windows security by hardening PC configurationsComputing and ComputersInformation Transfer and ManagementOver 8000 Windows PCs are actively used on the CERN site for tasks ranging from controlling the accelerator facilities to processing invoices. PCs are managed through CERN's Computer Management Framework and Group Policies, with configurations deployed based on machine sets and a lot of autonomy left to the end-users. While the generic central configuration works well for the majority of the users, a specific hardened PC configuration is now provided for users who require stronger resilience against external attacks. This paper describes the technical choices and configurations involved and discusses the effectiveness of the hardened PC approach.CERN-IT-2019-003Poster-2018-664oai:cds.cern.ch:26898802019-09-17 |
spellingShingle | Computing and Computers Information Transfer and Management Martin Zamora, Pablo Kwiatek, Michal Bippus, Vincent Nicolas Cruz Elejalde, Eneko Increasing Windows security by hardening PC configurations |
title | Increasing Windows security by hardening PC configurations |
title_full | Increasing Windows security by hardening PC configurations |
title_fullStr | Increasing Windows security by hardening PC configurations |
title_full_unstemmed | Increasing Windows security by hardening PC configurations |
title_short | Increasing Windows security by hardening PC configurations |
title_sort | increasing windows security by hardening pc configurations |
topic | Computing and Computers Information Transfer and Management |
url | https://dx.doi.org/10.1051/epjconf/201921408019 http://cds.cern.ch/record/2689880 |
work_keys_str_mv | AT martinzamorapablo increasingwindowssecuritybyhardeningpcconfigurations AT kwiatekmichal increasingwindowssecuritybyhardeningpcconfigurations AT bippusvincentnicolas increasingwindowssecuritybyhardeningpcconfigurations AT cruzelejaldeeneko increasingwindowssecuritybyhardeningpcconfigurations |