REPUBLIC OF CAMEROON REPUBLIC OF CAMEROON

Peace-Work-Fatherland Peace-Work-Fatherland
MINISTRY OF EDUCATION MINISTRY OF HIGH EDUCATION
SUPERIORS
HIGHER INSTITUTE OF
SCHOOL OF ENGINEERS ENGINEERING AND MANAGEMENT
ET MANAGEMENT OF AFRICA FOR CENTRAL AFRICA
CENTER
ESIAC
ESIAC

SECURITY REPORT OF SYSTEMS

EXPLOITATION

THEME: MANAGEMENT OF VULNERABILITIES AND

SECURITY OF OPERATING SYSTEMS

Written and Presented by:

Ngalle Michel

Engineering student in 5th Year Computer Engineering specializing in Software Engineering and

Information Systems Security

Under the supervision of:

[Link] SERGE
Teacher of SYSTEMS SECURITY
EXPLOITATION

Academic Year 2023/2024

 Vulnerability Management and Operating System Security

SUMMARY
SUMMARY.............................................................................................................................................1
LIST OF FIGURES.............................................................................................................................2
I. GENERALITIES OPERATING SYSTEMS..........................................................4
DEFINITION
ROLE........................................................................4
OPERATING SYSTEM CLASS...............................................................5

BASIC FUNCTIONS OF AN OPERATING SYSTEM…………………………………….5

IMPORTANCE OF OS SECURITY………………………………………………………….6
II. BASIC PRINCIPLES OF OPERATING SYSTEM SECURITY.........6
CURRENT VULNERABILITIES IN OS..........................................................6

PREVENTION AND PROTECTION MECHANISMS………………………………………………7

III. SECURITY IN LINUX ENVIRONMENTS
PRESENTATION OF LINUX
LINUX SECURITY ARCHITECTURE…………………………………………………………...8
MANAGEMENT PERMISSION AND ACCESS RIGHTS…………………………………………………10
IV. ACCESS MANAGEMENT IN OPERATING SYSTEMS………………………………………………………..13

ACCESS CONTROL MODEL.............................................14

V. USER AND GROUP MANAGEMENT ON LINUX…………………………………..14

USER AND GROUP MANAGEMENT………………………………………………………….15
ACCOUNT MANAGEMENT UNDER LINUX…………………………………………………………...15
VI. ADVANCED SECURITY MECHANISMS IN OS..............................16
SANDBOXING AND PROCESS ISOLATION.........................................................16

ILLUSTRATION OF WINDOWS SANDBOX IN WINDOWS 2011…………………………..17

CONTAINERIZATION AND VIRTUALIZATION
VII. MANAGEMENT OF CORRECTIONS AND UPDATES...................................24

IMPORTANCE OF SECURITY PATCHES

TOOLS FOR MANAGEMENT OF CORRECTIONS AND UPDATES..........................26

CONCLUSION
BIBLIOGRAPHY..................................................................................................................................29

Page 1 | 31
 Vulnerability Management and Operating System Security

LIST OF FIGURES
Figure 1: UBUNTU LINUX
Figure 2: READING A FILE....................................................................................12
Figure 3: ACCESS TO A DIRECTORY.................................Error! Bookmark not defined.
Figure 4: BIOS PARAMETERS..............................................Error! Bookmark not defined.
Figure 5: FUNCTIONALITY PANEL WindowsError! Bookmark not defined.
Figure 6: CLICK ON WINDOWS FUNCTIONALITY........Error! Bookmark not defined.
Figure 7: INSTALLATION OF WINDBOX SANDBOX…………………………………..20
Figure 8: CLICK ON RESTART NOW……………………………………21
Figure 9: OPENING A FILE IN THE SANDBOX……………………..21
Figure 10: WINDBOX SANDBOX WINDOW……………………………………………..22
Figure 11: SOLARWINDS PATCH MANAGER…………………………………………..26
Figure 12 : MANAGEENGINE PATCH MANAGER………………………………………26
Figure 13: IVANTI SHAVLIK

Page 2 | 31
 VULNERABILITY MANAGEMENT AND OS SECURITY

INTRODUCTION
Nowadays, the evolution of computing and information technologies
considerably bring new threats and possible security vulnerabilities in
the systems (operating systems, IT, information...) of companies or of a
particular, thus these systems are under the constant threat of potential
vulnerabilities and cyberattacks. In order to be able to address these different vulnerabilities
decision-makers need effective solutions, methods, or tools to manage better
these vulnerabilities in our various operating systems. It is in this
launched that we are particularly interested in regarding management
of these vulnerabilities and securing our operating systems, thus our duty
will consist of giving an overview of operating systems, the different
flaws and vulnerabilities in our operating systems, means of protection and
prevention, The Linux environment and the management of its security as well as the evaluation
of several types of processes in response to these vulnerabilities.

Page 3 | 31
 MANAGEMENT OF VULNERABILITIES AND SECURING OPERATING SYSTEMS

I. GENERALITIES ON OPERATING SYSTEMS

1. Definition

An operating system (Operating System in English or OS) is a set of

programs that enable the operation and use of the main resources of
the computer (memory, hard drive, processor). It serves as a bridge between these components and the
software or applications that will allow the user to take advantage of the features of
his device. The operating system is made up of a kernel where are grouped
all the basic system programs, an interface (shell) that plays the role
intermediary between the user and the operating system and a file system (File
System or FS) for data management. Other programs called generic drivers
are often included in the operating system to allow interaction with
new devices (keyboard, mouse, printer, speaker, game controller, hard drive,
etc.). They thus ensure the flow of inputs and outputs. As the operating system plays the
interface role between all resources and applications, the user benefits from a gain
considerable time that he would not have if he had to connect directly to each
program.

2. ROLE

An SE resolves issues related to the operation of the computer by ensuring:

Effective, reliable, and economical management of the computer's physical resources

(notably critical resources such as processor, memory…): it organizes and
Controls the allocation of processors, memories, icons, and windows,
devices, networks between the programs that use them. It assists the programs
users. It protects users in the case of shared use.

It offers the user a simpler and more pleasant abstraction than the hardware:
a virtual machine allowing interaction with users by presenting them
a machine easier to operate than the real machine
Manage the processor: that is to say, manage the allocation of the processor among the different
applications thanks to a scheduling algorithm.

Page 4 | 31
 Vulnerability Management and Operating System Security

Manage memory: that is to say, manage the memory space allocated to each application and,
if applicable, to each user.
In case of insufficient physical memory (RAM), the operating system may
create a memory area on the hard drive, called virtual memory.
Manage input/output: that is, manage programs' access to resources.
material through the drivers.
Manage the execution of applications: that is, to ensure the proper execution of
applications by allocating the necessary resources for their proper functioning,
but also allow to kill an application that is no longer responding correctly, by
example.
Manage files: that is to say, manage reading and writing in the file system
and the access rights to files by users and applications.

3. Classes of operating systems

Mono-task (DOS): At any given moment, only one program is executed; another

The program will only start, except under exceptional conditions, when the first one is
I finished.
Multitasking (Windows, Unix, Linux, VMS): multiple processes (i.e. a
The "program" being executed can run simultaneously (multi-system)
Processors) or in quasi-parallelism (time-sharing systems)
Mono-session (Windows 98, 2000): at most one user at a time on a machine.
Network systems allow for the differentiation of multiple users, but each of them
exclusively use the machine (multi-user, single-session)
multi-sessions (Windows XP, Unix, Linux, VMS): Multiple users can
working simultaneously on the same machine
4. Basic functions of an operating system:
The main functions provided by an SE are as follows:
Management of main memory and secondary memories,
Low-speed or high-speed I/O (peripherals) execution
Multiprogramming, time sharing, parallelism
Interruption, scheduling, memory allocation, data sharing,
Launching the system tools (compilers, user environment...)
Page 5 | 31
 Vulnerability Management and OS Security

Launch of tools for the system administrator

Protection, security;
Networks
5. Importance of OS security
Personal data protection (data theft, data loss, or alteration of)
gives
Proper functioning of processes (data processing, reading and writing files
etc...)
A network security and a robust system,
Protection against threats (viruses, ransomware, Trojan horses, etc...)
Data loss
Ensure the sustainability of the system throughout its use
An efficient, reliable, and economical management of the computer's physical resources
(especially critical resources such as processor, memory, etc...)

II. BASIC PRINCIPLES OF SYSTEM SECURITY

OF OPERATION
Common vulnerabilities in operating systems
Cyber attackers have various techniques to exploit vulnerabilities of
operating systems. They can for example launch injection attacks, use
malicious software, or run automated scripts to infiltrate a
unprotected system. Here are the most common exploitation methods:
Phishing and social engineering,
Exploitation of known vulnerabilities (exploits),

Brute force attacks,

Use of backdoors and rootkits
Vulnerabilities can take various forms, and it is important to be aware of them to
better counter them. Here is a non-exhaustive list of the most common types of vulnerabilities
frequently encountered in operating systems:
Security vulnerabilities in the software
System configuration errors
Issues of inappropriate access rights
Lack of regular updates

Page 6 | 31
 Vulnerability Management and Operating System Security

Arbitrary code execution

The deployment of untested software: Computer vulnerabilities arise from
often due to the negligence or inexperience of a programmer. If new software
where updates are deployed without being tested, this can lead to conflicts
software or remote security vulnerabilities
The user sends an excessive amount of data to an application, which can
cause a memory overflow and allow the attacker to execute code
malicious.
2. Protection and prevention mechanisms
Protection against operating system vulnerabilities involves implementation
of robust security practices and user awareness. The following measures
are essential for strengthening thesecurity of a computer system:
Regular installation of security updates
Use of effective antivirus solutions
Meticulous configuration of access rights
Ongoing training for users on threats and best practices

III. SECURITY IN LINUX ENVIRONMENTS

1. Introduction to Linux
Linux® is an operating systemOpen SourceAll operating systems based on
Linux includes a Linux kernel, which manages hardware resources, as well as a set of
software packages that make up the rest of the operating system. Companies can
also decide to run their Linux operating system on a Linux server. The system
The operating system includes certain basic components, such as GNU tools, among others.
others. These tools allow the user to manage the resources provided by the
core, to install additional software and configure the settings of
performance and security, Linux provides several distributions such as:
Android
Arch Linux
CentOS
Debian
Elementary OS
Fedora Linux
Gentoo Linux
Page 7 | 31
 Vulnerability Management and Operating System Security

Kali Linux
Linux Lite
Linux Mint
Manjaro Linux

Fig 1: Ubuntu Linux

2. Security architecture of LINUX

Here are the basic best practices for Linux server security. Although these
considerations are important for the security of Linux servers:

Encrypt the data communications to and from your Linux server.

Use SCP,SSHrsync orSFTPfor file transfers. Avoid using some
services such as FTP, Telnet, etc., as they are not secure. To maintain a
secure connection (HTTPS), install and configure a certificateSSLon your
server.
Minimize software to reduce vulnerabilities in Linux and perform
regular security audits: do not install unnecessary software to avoid

Page 8 | 31
 Vulnerability Management and OS Security

to introduce vulnerabilities from software or packages. If possible,

Identify and remove all unwanted packages.

Maintain the core Linux and the software à day.

The application of security patches is an important aspect of maintaining your
Linux server. Linux provides all the necessary tools to maintain your system.
day. Linux also allows for easy upgrades between versions. Check and
apply all security updates as soon as possible and ensure that you perform the
update to the latest available kernel version. Use the managers of
respective packages according to your Linux distributions, such as yum, apt-get, or dpkg,
to apply all security updates.

Use the extensions from security Linux.

Linux is equipped with various security features that you can use to protect yourself.
protect against misconfigured or compromised programs. If possible, use
SELinux and other Linux security extensions to impose limitations on the
network and other programs. For example,SELinux provides different policies for
security for the Linux kernel.
Deactivate the connection root.
It is recommended todo not log in as the root userYou must
use sudo to execute commands at root level if necessary. Sudo
significantly improves the security of the system without sharing information
identification with other users and administrators.
Search for listening network ports using SS or netstat and close or
limit all the others ports.
It is important to pay attention to the ports that are listening on the network interfaces of
system. This can be done viassornetstatAll open ports can be there
proof of an intrusion.
Configure the Lightsail firewall and system-level firewalls
exploitation on Linux servers to enhance security.
Use theLightsail firewallto filter traffic and only allow necessary traffic
towards your server. The operating system level firewall is a program
user space application that allows you to configure the provided firewalls

Page 9 | 31
 VULNERABILITY MANAGEMENT AND OPERATING SYSTEM SECURITY

by the Linux kernel. You can useiptables, ufw, firewalld, etc., depending on
your Linux distribution.
Use auditd for the accounting you system.
Linux provides an auditd for system auditing. Auditd writes the records
disk audit. It also monitors various system activities, such as
connexions système, les authentifications, les modifications de comptes et les refus
SELinux. These records help administrators identify activities.
malicious or unauthorized access.
Install a system of detection of the intrusions (IDS).
Use fail2ban or denyhost as an IDS. Fail2ban and denyhost analyze the
log files looking for too many login attempts
unsuccessful and block any IP address that shows signs of activity
malicious.
Regularly create backups.
Avoid granting permissions to users, groups, and other entities.
read, write, and execute (777) for files and directories.
You can usechange modeto restrict access to files and directories, such as
that the web root directory, the document root, and more. Modify the
authorizationsto provide access to authorized users only.

Unix-inspired operating systems (including Linux) have the

ability to deeply define access rights management for various files
your OS. Access rights define the ownership of a file or a directory.
to a user and a group of users. They also manage which actions the
users have the right to perform actions on the files, depending on whether they are the owner of the
file, member of the group owning the file, or neither. Ownership and
the management of permissions on a file's ownership, indicates to which user it belongs
the file, who possesses it. Based on this possession (or not), it will then be possible
to define access permissions on the file.

3. Permissions and Access Right Management

The possession of a file is defined in three categories:
The user who owns the file (u). This is usually the creator of the file.
Note that a file created by a command executed using sudo will belong to

Page 10 | 31
 MANAGEMENT OF VULNERABILITIES AND SECURING OPERATING SYSTEMS

the root user; you may potentially need to change the owner of this
file to be able to use it with your own user account.)
The group owner of the file (g): If a user is a member of a certain group that
owns the property of a file, the user will also have certain special permissions
on this file.
The others, other, the rest of the world (o). In short, everyone not being the owner of
file, nor member of the group owning the file. Associated permissions are performed
individually with each file.
Permissions refer to what the various categories of users (owner of a
file, group members owning a file and the rest of the world) have permission
to perform on a given file. For example, a category of users may have access to
reading and writing to a file, while another category has read-only access to it
same file. Permissions are defined at three levels:
Reading a file: this permission is necessary to access the content
from a file (listen to an audio track, watch a movie, read a text, list the contents (ls))
navigate within a directory...). This permission is noted r (for Read, to read)
Writing to a file: this permission is necessary to be able to make changes
modifications to a file (correct a text and save the changes; delete the
red eyes
delete a file in a folder; etc.). This permission is noted w (for write,
to write.
The execution of a file: this permission is particularly necessary for the
software, so that they can be executed. This permission is noted x (for execute,
execute). For a directory, the 'x' permission allows it to be the current directory.
(cd).
Example: Case of Ubuntu
On Ubuntu, right-click on a file or directory and then choose properties.
Go to the permissions tab.

Page 11 | 31
 VULNERABILITY MANAGEMENT AND OS SECURITY

For a file For a directory

Fig 2: Reading a file

Fig 3: Access to a directory

For the Owner and the Group, you can choose from the menu.
available dropdown corresponding to grant read and write rights or read
alone.
For others, you can choose between reading and writing, read-only and
none. You can choose the group to which the file belongs (by default,
the owner's group, except in special cases).
When it comes to a directory, for the Owner and Group you can
choose between Creation and deletion of files, Access to files, and
For Others, you can choose between Creation and deletion of
files

The following section (in command line) provides more details about the different
possibilities of permissions.

In command line
Page 12 | 31
 Vulnerability Management and Operating System Security

The file permissions of a directory can be displayed by the command

ls -l

The access rights then appear as a list of 10 symbols.

drwxr-xr-x

The first symbol can be -, d, or l, among others

classic file
directory
l:link: symbolic link
c:character: character-type device
b: block: block-type peripheral
p:pipetube, pipe or queue (line)
s:socket

Followed by 3 groups of 3 symbols each, indicating whether the file (or directory)
is allowed for reading, writing, or execution. The 3 groups correspond, in this
order, to the rights of the owner, the group, and then the rest of the users. In the
introductory paragraph, you will have noticed bold letters in the terms
English. These are the letters that are used to symbolize the said permissions. If
the permission is not granted, the letter in question is replaced by " - ". If one
Take the given letters for reading/writing/executing (read/write/execute), we
obtaining: rwx.

Another very useful command allows you to view all the rights (and the
owners) of all the parent directories (seepaths) of a specific resource:
namei -mo /path/

IV. ACCESS MANAGEMENT IN OPERATING SYSTEMS

Access control is a key element of security that determines who is authorized.

to access certain data, applications, and resources, and under what circumstances. From the
just as keys and pre-approved guest lists protect spaces

Page 13 | 31
 Vulnerability Management and Operating System Security

physiques, access control strategies protect digital spaces. In other

terms, they allow good people in but not bad ones. The strategies of
access control relies heavily on techniques such as theauthenticationand
the authorization, which allows organizations to explicitly verify that users
are indeed those they claim to be and that these users are granted the level
appropriate access depending on the context (device, location, role, etc.). The control
access prevents the theft of confidential information, such as customer data and the
intellectual property, by malicious actors or other unauthorized users. It
also reduces the risk of data exfiltration by employees and prevents threats
emanating from the web. Rather than managing permissions manually, most of
security-focused organizations rely on identity and access management solutions
access to implement access control strategies.

1. Access control models

Discretionary Access Control (DAC): in DAC models, each object of a

protected system has an owner, and the owner grants access to users.
discretion. Discretionary access control allows for case-by-case control of
resources.
Mandatory Access Control (MAC): in MAC models, users are
grant access in the form of permission. A central authority regulates rights
access and organizes them into levels, which extend uniformly. This model is very
common in governmental and military contexts.
Role-Based Access Control (RBAC): In RBAC models, the rights
access is granted based on defined business functions, rather than on identity or
the seniority of individuals. The goal is to provide users the only
data they need to perform their functions, and no more.
Attribute-Based Access Control (ABAC): In ABAC models, access
is granted flexibly based on a combination of attributes and
environmental conditions, such as time and place. Access control in
the attribute function is the most access control model

V. USER AND GROUP MANAGEMENT ON LINUX

Page 14 | 31
 Vulnerability Management and Operating System Security

User and Group Management

In the command line:

Display the list of users: compgen -u ou cut -d: -f1 /etc/passwd

Add a user to the system: sudo useradd username
User deletion: sudo userdel username
Create a group: groupadd -g group-ID group-name
Display the list of groups: compgen -g
User deletion: sudo userdel username
Deleting a group: sudo groupdel group_name
Add a user to a group: sudo adduser username
group_name

2. Account management under LINUX

Change the identifier of a user account: This change is made from a

another administrator account than the modified account. No session of the modified account
must be active: sudo usermod --login new_account_identifier_to_modify --
home /home/new_account_identifier_to_modify--move-home
initial_account_identifier_to_modify
Modify the identifier of the unique administrator account: The modification cannot
to take place while the session is active. It is therefore advisable to restart the computer in
recovery mode and then log in as super-
user: usermod --login new_identifier --home /home/new_identifier --
move-home
Group identifier modification: sudo groupmod --new-name new_name
current_name
Locking an account: usermod --expiredate 1 username
Changing the password for the current user: the command passwd

Change the password for usr.

UNIX password (current):

Enter the new UNIX password:

Page 15 | 31
 Vulnerability Management and Operating System Security

Re-enter the new UNIX password:

passwd: the password has been updated successfully

VI. ADVANCED SECURITY MECHANISMS IN OS

1. Sandboxing and process isolation

Sandboxing refers to a technique used to isolate software or files.

potentially malicious or unreliable from the rest of a computer system or a
network. It provides a controlled and secure environment, commonly referred to as a 'sandbox',
in which these suspect entities can be executed or analyzed without presenting any risk
For the host system, sandboxing is widely used to analyze non-compliant programs.
tested or unreliable and is intended to prevent dangers from entering the network. In order
to prevent any infection or damage to the host computer or the operating system, the
Sandboxing keeps the code confined in a test environment, as its name suggests.
As indicated, this closed test environment serves somewhat as a sandbox, you
allowing to experiment with different parameters and observe how the software reacts. From
Moreover, it is a secure environment where mistakes will not actively affect your
host devices

2. Types of Sandbox

There are different types of Sandboxes, each addressing specific needs and scenarios.
specific. Here are some common types of sandboxes:

Sandbox at the operating system level: They are implemented at the

operating system and isolate processes from each other. Each process
works in its own restricted environment, preventing any interference with
other processes.
Sandbox at the virtual machine level: They create real virtual machines.
(VM) that run a separate operating system on top of the system
host exploitation. Each VM is autonomous and isolated, allowing multiple
virtual environments to coexist on the same physical machine.

Page 16 | 31
 VULNERABILITY MANAGEMENT AND OS SECURITY

Application sandboxes: They isolate individual applications from the rest of the system so that
to ensure that their actions are contained. They can be used to test
potentially risky software or to provide an additional layer of security.
Sandbox for web browsers: This is a specific type of application Sandbox
which focuses on web browsers, isolating web pages and extensions of
underlying system browser.
Cloud Sandbox: These are virtualized environments provided by the platforms
cloud computing to create isolated spaces for testing and the
development. Users can experiment with applications without affecting the
production systems.

3. Operation

Sandboxing works by creating an isolated and secure environment to execute

files or potentially dangerous programs without affecting the host system.
The main objective of sandboxing is to detect and mitigate threats before they
can infiltrate the operating system or the real network. When a file
the suspect is introduced into the sandbox, their behavior is closely monitored.
sandbox records all the actions that the file attempts to perform, such as calls
system, file modifications, network communications, and more. The
The analysis process of the sandbox is based on real-time observation of behavior.
the file during its execution. This dynamic analysis allows professionals to
the security of identifying any malicious or unauthorized behavior that could be
manifested during its execution, Sandboxing also uses techniques
signature analysis and heuristics to identify patterns or behaviors
known malicious software. This approach allows for detection and implementation of
quarantine the threats already encountered in the past, However, one of the advantages
One of the most important aspects of sandboxing is its ability to detect ‘zero-day’ threats.
to say the unknown threats that do not have a signature to be recognized by
traditional antivirus software. By observing the behavior of these threats, the
sandboxes can help identify and protect against emerging dangers.

4. Illustration of Windows Sandbox in Windows 11

Page 17 | 31
 MANAGEMENT OF VULNERABILITIES AND SECURING OPERATING SYSTEMS

Sandbox, also called Sandbox, runs like any other application and allows
to create a mini-Windows within Windows in a temporary manner, completely locked,
completely isolated from the rest of the operating system. You can then use it to
open suspicious files without risking the security of your machine. The icing on the cake,
After each use, Windows Sandbox deletes all the generated data.
The tool is thus always ready for use, however, the use of Windows Sandbox.
requires some prerequisites. The application, which is not enabled by default in the OS, is
indeed available only on the Professional version of Windows 11. Furthermore, it
requires the activation of virtualization technology within the PC's BIOS.

Check if virtualization is enabled: if you are using Windows 11, there is a strong
chances that virtualization is already enabled by default on your machine. You can
however, you can easily check it by accessing your PC's BIOS. If the line
Virtualization Technology (generally found in advanced options,
"Advanced", in the BIOS), indicates Enable, which means virtualization is active.

Fig 4: BIOS Parameters

If the line says Disabled, you must change this parameter to enable it.
Enabled, then restart your PC for the changes to take effect.

Page 18 | 31
 VULNERABILITY MANAGEMENT AND OS SECURITY

Accessing the BIOS or UEFI of your PC is usually done by pressing the key
Escape, F1, F2, F8 or F10. If you do not know how to proceed on your PC, consult the
manufacturer support.

Access optional features: The sandbox is not activated by default on

Windows 11 Pro. You indeed have to install it from the features panel.
additional Windows, To do this, open the Windows Settings using
Press Windows + i, select Apps in the left column, then
enter the menu dedicated to optional Features

Fig 5: Windows Feature Panel

Then scroll through all the displayed options, and at the bottom of the window, click on
More Windows features.

Page 19 | 31
 MANAGEMENT OF VULNERABILITIES AND SECURING OF OPERATING SYSTEMS

Fig 6: Click on Windows Features

Activate the Sandbox: in the Windows Features window that opens, locate the
Line Sandbox Windows, check the option and click the OK button to start it.
installation in Windows 11.

Fig 7: Installation of Windows Sandbox

Page 20 | 31
 Vulnerability Management and Operating System Security

Then click the Restart now button to restart your PC so that the
the modifications made should be taken into account.

Fig 8: click on restart now

Open a file in the Sandbox: open the Start menu and click on All
applications to display the list of installed applications on your PC. At the bottom of
this one, open the Windows Sandbox application.

Fig 9: Opening a file in the Sandbox

Page 21 | 31
 Vulnerability Management and OS Security

A window of the Windows Sandbox should then open on the screen. As you can
to note, it is actually a new session of Windows 11, running in a
window independent of the rest of your operating system.

Fig 10: Windbox Sandbox Window

5. Containerization and Virtualization
Containerization is a software deployment process that bundles the code of a
application with all the files and libraries it needs to run on
any infrastructure. Traditionally, to run any application
On your computer, you should install the version corresponding to the operating system.
from your machine. For example, you had to install the Windows version of a software package on a
Windows computer. However, with containerization, you can create a software package
unique, or container, that runs on all types of devices and operating systems.
Advantages
Portability: Software developers use containerization to deploy
applications in multiple environments without rewriting the program code. They create
an application once and deploy it on multiple operating systems. By
for example, they run the same containers on Linux and operating systems
Windows. Developers are also upgrading the code of legacy applications.
towards modern versions using containers for deployment.

Page 22 | 31
 Vulnerability Management and Operating System Security

Scalability: Containers are lightweight software components that

execute efficiently. For example, a virtual machine can launch an application
containerized faster, as it does not need to start a system
exploitation. As a result, software developers can easily add
multiple containers for different applications on a single machine. The cluster of
Containers use computing resources from the same operating system.
shared, but one container does not interfere with the operation of other containers.
Fault tolerance: Software development teams use containers
to create fault-tolerant applications. They use several containers to
run microservices in the cloud. Like containerized microservices
function in isolated user spaces, a single defective container does not affect
the other containers. This increases the resilience and availability of the application.
Agility: Containerized applications run in computing environments
isolated. Software developers can solve problems and modify the code
of the application without interfering with the operating system, the hardware or others
application services. They can shorten software release cycles and
work quickly on updates with system virtualization
exploitation, sometimes used on a domestic scale, allows execution on a single and
same machine multiple different OS, not interfering with each other.
Virtualization is a technology that allows for the creation and management of multiple computers.
virtuals using a single physical machine. These virtual computers allow you
to access your usual resources, whether they are software, tools, data
stored on your network, or also specific devices, You can thus
use one or more operating systems on your computer, thanks to
resources allocated by the physical machine located at the top of the chain. The
virtualization is not the cloud, even if it is indeed today a
complementary technology
Advantages:
Flexibility: This is the main advantage of these, the creation of a virtual machine is
much faster and easier than installing an operating system on a
physical server. It is possible to clone a virtual machine with the system
exploitation already installed. Software developers and testers can create
new on-demand environments to handle tasks as needed.

Page 23 | 31
 VULNERABILITY MANAGEMENT AND OS SECURITY

Better use of resources and optimization of return on investment: As

Most virtual machines operate on a single physical computer, it is not
No need to buy a new server to run another system
of operation. You can make better use of the equipment you already own.
Scalability: Thanks to cloud computing, it has become easier to introduce multiple
copies of the same virtual machine to better manage increased workloads.
Security: virtual machines offer better security. Indeed, it is a file.
which can be used to detect malware coming from a program
external. If it is compromised, it is enough to delete it and quickly recreate it, which
speed up the recovery of files infected by malware.
VII. MANAGEMENT OF CORRECTIVES AND UPDATES
1. Importance of security patches
Patch management primarily involves applying updates to applications or
operating systems that could present vulnerabilities that could be exploited by
hackers to infiltrate the information systems of companies and create
numerous inconveniences: data leaks, avoid intrusions into the system, prevent the
data theft, Ensure data encryption, Protection against threats and
cyberattacks (viruses, ransomwares, trojans ...) operational disruption, loss of
the company's reputation, etc. Patching is therefore a key element to rely on for
applications and OS always up to date and secure. It is all the more important that with
the evolution of uses and the development of new forms of work, the digital
the workplace is now complex (multiple devices, remote work, BYOD, etc.).
2. I
Linux machines are analyzed using agents and receive patches. The process
is the following:
1. Identify your Linux machines:
If you know the identity or location of your Linux machines, you can create
a group of Linux machines.
If you do not know the identity and location of all your Linux machines,
perform a power state analysis on the group My domain or Entire Network.
The analysis identifies the type of OS of each machine in the group and your Linux machines are
displayed in the Linux Patch tab of the Machine view.

Page 24 | 31
 Vulnerability Management and Operating System Security

Create one or more groups of Linux patches and configurations:

Create a Linux patch group: The operation is optional but it is generally
advised. Creating a patch group gives you better control over your
analyses and deployments. With a set of patches, you can initiate an analysis.
who is looking for a specific set of patches and deploy it.
Create a Linux patch analysis configuration: You are using this configuration
to precisely specify how your Linux machines should be analyzed.
Create a Linux patch deployment configuration: You are using this
configuration to specify precisely how patches should be deployed
to your Linux machines.
Create one or more agent strategies: An agent strategy defines exactly what
what an agent can or cannot do. You create one or more corrective tasks.
Linux in the agent strategy. In each task, you specify the moment when the task
must be executed on an agent machine and the configurations to be used during the
analysis and deployment process.
Install the agent strategy: Each target Linux machine must be properly configured.
configured so that you can perform the installation in Push mode of an agent.
One option is to perform a 'Push Mode Installation' of the agent from
the Security Controls console. You have several methods available for this:
In your group of Linux machines, select the machines in the lower pane.
wanted, then click on Install/Reinstall the agent.
In the Machine view, right-click on the Linux machines and install it.
desired agent strategy.
If you have conducted a power state analysis on your Linux machines, you
You can also perform this step from the Results list in the navigation pane.
Use the agent.
The agent automatically executes its tasks and reports the results to the console. You
You can use the Machine view or the Analysis view to manage the machines that are running
an agent strategy. To manually control the agent, you use a utility of
command line
3. Patch and update management tools
there are several tools that help IT staff manage patches. These tools
are generally intended for businesses, individuals being able to download the updates

Page 25 | 31
 Vulnerability Management and Securing Operating Systems

manual day at their place. Several software developers offer tools.

running on individual machines that query a central server and
automatically downloads updates. The Windows 10 operating system is a
example of software that downloads and updates automatically without interaction
the user.

Fig 11 : SolarWinds Patch Manager

Fig 12: ManageEngine Patch Manager

Page 26 | 31
Vulnerability Management and Operating System Security

Fig 13: Ivanti Shavlik

Page 27 | 31
 Vulnerability Management and Operating System Security

CONCLUSION
Reaching the end of our study; which focused on; '"TALEND ETL"; where it was about
first present the integration is

Page 28 | 31
 VULNERABILITY MANAGEMENT AND OS SECURITY

BIBLIOGRAPHY
• URL provided does not contain translatable text.
• [Link]
and logging via cloud
• [Link]
integrationwindows/disabling-internet-access-for-studio
• The provided text is a URL and does not contain translatable content.
• Unable to access or translate content from the provided URL.
• Invalid request. Unable to access external URLs.
• Unable to access external content.
generation-in-a-file/
• Unable to access the content of the provided URL.
• Unable to access external links for translation.

WORKS
No translatable text provided.

Page 29 | 31
Vulnerability Management and OS Security

Page 30 | 31