PCChecker: Harding Windows Security Configurations
KangSan Kim, Jungmin Kang, DoHoon Lee · 2008
PC security for end users has been emerging concern because many attacks such as worm, virus, spyware and so on are targeting client PCs, which can affect overall organization's security. Many PC security solutions such as patch management system (PMS), AV (anti-virus), AS (antispyware) and so on have been disseminated to end users. However without secure configuration of Windows operating systems, all solutions can not be effective. Window security configuration depends on discretionary efforts of end users. The users actually do not know what they have to configure to make their PCs in safe. Moreover, thers is no standard way of representing the safety level or score that can help understand how safe their PCs are. In this paper, we present a mandatory method to harden Windows security configurations and a safety scoring mechanism using CVSS (common vulnerability scoring system).