[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-ms
Subject:    RE: Isolating Windows Applications
From:       "Benjamin Meade" <ben () lanwest ! com ! au>
Date:       2003-04-08 3:28:03
[Download RAW message or body]


Is a service more secure than a standard app, or is just easier to
manage?

Benjamin Meade
System Administrator
LanWest Pty Ltd

-----Original Message-----
From: James Ruddy [mailto:james.ruddy@jrcsonline.com] 
Sent: Tuesday, 8 April 2003 11:19 AM
To: 'Juan José Sánchez Mesa'; focus-ms@securityfocus.com
Subject: RE: Isolating Windows Applications

Juan,

I am running a similar setup as we speak. I have the console app run as
a very low privileged user. The second step I took was to notify the
business unit, management and the app vendor that the application needs
to be written as a service.

Hope this helps.

Jim

-----Original Message-----
From: Juan José Sánchez Mesa [mailto:juanjo.listas@dobleJ.net] 
Sent: Monday, April 07, 2003 13:52
To: focus-ms@securityfocus.com
Subject: Isolating Windows Applications


(sorry for my bad enlish)

A client wants to run an application in one of our internet server. The 
application is made by themselves. It's a console application which
listen 
in one tcp/ip port for conections from a client application.

We want to protect our server, isolating the application so it can't
access 
critical files, the registry, listen on more than one tcp/ip port (only
in 
which is designated to listen), etc ... And if it's possible, protect
the 
server if the application crash. The server is a Windows 2000 Server
(SP3).

Anyone knows a program that isolate other programs in this way ? It's 
possible do this using a user with low privileges and running the 
applicaction as this user ?

Ideas, tricks ... ???

Thanks for the replies.



<b>
----------------------------------------------------------------------
Block Spam, Smut & Viruses
SurfControl E-mail Filter for SMTP & Exchange leverages multiple layers
of
technology including filtering embedded and attached file content. Rid
your
enterprise of unwanted content. 
http://www.securityfocus.com/SurfControl-focus-ms2
Download your free fully functional trial, complete with 30-days of free
technical support. 
----------------------------------------------------------------------
</b>



<b>
----------------------------------------------------------------------
Block Spam, Smut & Viruses
SurfControl E-mail Filter for SMTP & Exchange leverages multiple layers
of
technology including filtering embedded and attached file content. Rid
your
enterprise of unwanted content. 
http://www.securityfocus.com/SurfControl-focus-ms2
Download your free fully functional trial, complete with 30-days of free
technical support. 
----------------------------------------------------------------------
</b>



<b>
----------------------------------------------------------------------
Block Spam, Smut & Viruses
SurfControl E-mail Filter for SMTP & Exchange leverages multiple layers of
technology including filtering embedded and attached file content. Rid your
enterprise of unwanted content. 
http://www.securityfocus.com/SurfControl-focus-ms2
Download your free fully functional trial, complete with 30-days of free
technical support. 
----------------------------------------------------------------------
</b>


[prev in list] [next in list] [prev in thread] [next in thread]