Assignment: Client Security Architecture

1

Master in Information Security Program Lulea University of Technology

Lulea Sweden

Professor TODD BOTH

(Client Security Architecture- A7005E)

Prepared and presented by: Usman Ali

Email:[e-mail]

Assignment :Client security Architecture

14 September 2014

2

Introduction

Few years back in IT world an updated Antivirus , firewall along with intrusion detection software were thought to be enough to fight with virus writers But as the technologies are getting advance new techniques and programs are destroying data and privacy of the end user . Once the destruction of data and control of the machines were the enjoyment of hackers and intruders but now misuse of data for financial and criminal purpose is more intended and attacks on

Following are the Main client security features.

- Policy

Define the state of the client computer, which clients are affected, the specific operations a scan performs, and what information to report to the Client Security server. Client Security stores policies as a collection of registry key settings.

3

Create, edit, and deploy policies by using the Client Security console.

Check the security status of the computer, if client have security problems then it will start scanin according to configuration and start reporting to client security server .

- Reports

Reports Shows the whole technical security reports of the environment , you can create alerts on attacks , change in policies deployment of policies and vulnerabilities , mostly reports can be access from client security reporting server and few are also accessible from client security console , admin can get reports using many different options like policy , group policy , start time, end time , time span , a single malware report using by name or history , by computer name and single or multiple domains . Report could be accessed through web browser in xml or html. Client security server can be configured to

- Definitions

WSUS is used to distribute client security definitions and updates related to scan engines and computer in the domain. This is a central management system of updates to minimize client’s traffic and work load to internet more over it give more control to filter and approve the updates according to the organizations policies. Updates contains definitions, changes in OS security, addictions security upgrades scan engine updates for specific versions, new threat definitions file update size could be from KB to MB.

Client security user interface.

The user interface includes a Dashboard tab and Policy Management tab.

Dash Board and policy management tab are included in user interface

Dash board tab in MS security Management console gives user an access to see and perform high level security task and security environment status.

Dashboard

Shows the whole enterprise security health status gives access to report and access to alerts.

6

https://www.directionsonmicrosoft.com/update/secured/2007/05/forefront-client-security-architecture.

References:

1-