TechEd 2002
SEC310:
Windows Network Security (Windows 的网络安全性)
Rui Hu (ruihu@microsoft.com)
Software Design Engineer
Windows Clustering
Scale Out & Enterprise Servers Group
Windows Division
Microsoft Corporation
Agenda
Four Components of Windows Security
Authentication (验证)
Authorization (授权)
Cryptography (加密/解密)
Auditing (审计)
Windows Security Push
Network Authentication (验证)
Microsoft Provided Security Support Provider (SSP) Packages
Microsoft NTLM for Windows_NT version 3.51 and later, Windows_2000, and Windows_XP
Microsoft Kerberos for Windows_2000/Windows_XP
Microsoft Digest SSP for Windows_2000/Windows_XP.
Secure Channel (Schannel)
Microsoft NTLM
NTLM non-interactive authentication:
Client
Server
User name (in plaintext)
Client
Server
Challenge
Microsoft NTLM
NTLM non-interactive authentication:
Client
Server
Response
Response: challenge encrypted with the hash of the user's
password.
Microsoft NTLM
NTLM non-interactive authentication:
Server
DC

下一页