Managing Microsoft Internet Explorer Security and Privacy

1
Managing Microsoft Internet Explorer Security and
Privacy

• By
• Vishnu Teja.T

2
Introduction

• Most organizations that use Microsoft operating
  systems also use Microsoft Internet Explorer. In
  fact, browsing the Internet has become a
  mission-critical business activity however, it
  also can provide attackers a direct avenue into
  the corporate network, bypassing traditional
  perimeter security mechanisms, such as firewall
  rules.

3
How it works

• Internet Explorer enables administrators to
  configure privacy and security settings easily
  and enables knowledgeable users to view privacy
  and security information to make decisions on
  whether to trust specific Web sites

4
Managing it.(Practices)

• Educate users.
• Install and maintain antivirus software.
• Apply security updates.
• Do not browse the Internet from high-value
  computers or with high-value credentials.
• Implement secure default settings.

5

• Internet Explorer determines the level of
  security that is warranted for a given website
• Websites are typically divided into four Zones
• Restricted sites
• Internet
• Intranet
• Trusted sites

6
URL Security Zones Cont.

• The new URL security zone settings in Windows
  Server 2003 help create an environment that is
  more secure by default. Under the enhanced
  security configuration, all Web sites are in the
  Internet zone.

7
URL Security
8
Hackers point.

• Network eavesdropping
• Data tampering
• Can inject Viruses, worms.etc

9
Security Managers point

• Incorporating security features into your web
  browser, implementation, and deployment, it helps
  to have a good understanding of how attackers
  think. By thinking like attackers and being aware
  of their likely tactics, you can be more
  effective when applying countermeasures.

10
More info

• http//safari.oreilly.com/0735620423/ch12ch12
• http//msdn2.microsoft.com/en-us/library/ms537180.
  aspx

11

• Thank You