Qof kastaa wuu ogyahay in ku rakibida darawalo badan iyo software kombuyuutar ay kordhinayso u nuglaanshaha dhinaca amniga. Markaad ku rakibto walxo, kakanaanta ayaa kordheysa iyo sidoo kale suurtogalnimada inaad la kulanto arrimaha amniga. Waxaan had iyo jeer doonayay qalab lagu qiimeeyo sida amniga nidaamku u kobcayo marka la rakibayo software aad qorsheyneyso inaad isticmaasho oo ilaa hadda aanan helin mid. Nasiib wanaag, Microsoft waxay^(Microsoft) soo saartay qalab qiimeyn bilaash ah oo lagu magacaabo Attack Surface Analyzer . Haddii aad rabto inaad wax badan ka ogaato iyo sida loo isticmaalo, akhri maqaalkan.

Waa in uu leeyahay shuruudo^{(Must Have Prerequisite)} - NET Framework 4

Soo deji oo rakib Microsoft.NET Framework 4 (Web Installer) ka hor inta aanad samaynin dejinta Microsoft Attack Surface Analyzer . Haddii aad ku rakibto ka dib markaad rakibto Attack Surface Analyzer , waxaad heli doontaa kaliya nooca khadka taliska ee qalabka. Haddii aad doorbidayso inaad isticmaasho is-dhexgalka garaafyada, ku rakib Microsoft.NET Framework 4 ka hor intaadan rakibin Microsoft Attack Surface Analyzer .

Waxaad ka heli kartaa Falanqeeyaha Dusha Weerarka ^{(Attack Surface Analyzer)} halkan^(here) .

Falanqeeyaha Dusha Weerarka Microsoft^{(Microsoft Attack Surface Analyzer)} - Maxay Samaysaa?

Macluumaad dhamaystiran oo ku saabsan qalabka waxa laga heli karaa dukumeentiga Readme Analyzer Attack Surface Analyzer^{(Attack Surface Analyzer Readme)} . Waxaan aad ugu talinayaa inaad soo dejiso oo aad akhrido dukumeentigan.

Si loo soo koobo qodobada muhiimka ah, Attack Surface Analyzer wuxuu sameeyaa kuwan soo socda:

• Wuxuu baadhayaa^(Scans) nidaamkaaga hawlgelinta si uu u sameeyo aasaaska ammaankiisa iyo heerka nuglaanta;
• Waxaa mar labaad la ordayaa wakhti kasta (ka dib markaad rakibto darawalada, cusbooneysiinta, codsiyada, iwm) si loo qabto isbeddelada ka dhacaya nidaamkaaga;
• Wuxuu barbardhigaa guntaada skaan kasta oo xiga oo la wadaaga warbixin ku saabsan waxa iska bedelay dhinaca amniga iyo dayacanka.

Warbixinta waxaa ka mid ah arrimaha amniga ee la ogaaday (fulliyeyaasha nugul, hagayaasha leh fuliyaasha nugul, goobaha diwaangelinta daciifka ah, hababka nugul, dunta iyo adeegyada, iwm.) iyo macluumaad dhamaystiran oo ku saabsan waxa iska beddelay nidaamkaaga (socodka socodsiinta, daaqadaha furan, nidaamka) modules, adeegyada, darawallada, diiwaan gelinta faylalka, Internet Explorer qaab- dhismeedka khaldan, xeerarka firewall, iwm).

Sida loo Isticmaalo Falanqeeyaha Dusha Weerarka^{(Attack Surface Analyzer)} ee Microsoft

Orod Weerarka Dusha Falanqeeyaha^{(Attack Surface Analyzer)} . Hubi in "Run new scan" la doortay oo tabo Run Scan^{(Run Scan)} .

Sug^(Wait) inta uu dhammaanayo habka xog ururinta. Waxay qaadan doontaa wakhti, markaa isku hubso xoogaa dulqaad ah.

Marka, xog ururinta la dhammeeyo, waxaa lagugu soo celinayaa shaadhka hore waxaana lagu tusi doonaa dariiqa macluumaadka laga helay iskaanka lagu kaydiyay. Faylkan waa inaan la tirtirin sababtoo ah waxay noqon doontaa gundhigga taas oo aad samayn doonto isbarbardhigga mustaqbalka.

Kadib marka aad rakibto codsiyada, darawalada, wax kasta oo aad rabto inaad ku rakibto oo aad qiimeyso, mar labaad socodsii qalabka oo samee iskaan cusub.

Marka iskaanka cusub la sameeyo, ka tag qalabka oo fur oo dooro "Samaynta warbixinta dusha weerarka caadiga ah"^{("Generate standard attack surface report")} .

Kadib, dooro faylka asalka ah iyo faylka uu sameeyay iskaanka u dambeeyay oo tabo Generate^(Generate) .

Warbixinta HTML waxa lagu tusi doonaa Internet Explorer , oo leh saddex qaybood: Warbixinta Kooban, Arrimaha Amniga^{(Report Summary, Security Issues)} iyo Dusha Weerarka^{(Attack Surface)} , dhamaantood waxay muujinayaan macluumaad faa'iido leh oo ku saabsan amniga nidaamkaaga iyo sida uu isu beddelay marka loo eego sawirka asalka ah.

Goorma ayuu Qalabkani waxtar leeyahay?

Falanqeeyaha Dusha Weerarku^{(Attack Surface Analyzer)} waa qalab qalafsan oo soo bandhigaya xogta muhiimka ah si faahfaahsan. Sidaa darteed, dhagaystayaasheeda bartilmaameedka ah waxaa sameeyay inta badan xirfadlayaasha iyo isticmaalayaasha awoodda leh xirfado farsamo oo wanaagsan.

Qalabku wuxuu faa'iido u yeelan karaa xaalado badan, oo ay ku jiraan: horumarinta software cusub iyo tijaabinta baylahda amniga, qiimeynta arrimaha amniga ee ka jira kombiyuutarada ee qaybta ka ah shabakada ka dib markaad rakibto software-ka caadiga ah ee loo baahan yahay, qiimeynta arrimaha amniga ee adiga kuu gaar ah. kombiyuutarka, ka dib marka aad rakibto dhammaan software-yada aad qorsheyneyso inaad si joogto ah u isticmaasho.

Evaluate How the Apps & Drivers Installed Weaken the Security of a PC

Everybody knows that installіng lots of drivers and sоftware on a cоmputer increases its vulnеrаbility from a security standрoint. Αs you install stuff, the complexity increases as well as the likelihood of encountering seсurity issues. I always wanted a tool to evalυate how the ѕecurity of a system evolves while installing sоftwarе that you plan to use and so far I haνen't found one. Luckily, Microsoft released a free evaluаtion tool namеd Attack Surface Analyzer. If you want to learn more about it and how to use it, read this article.

Must Have Prerequisite - NET Framework 4

Download and install Microsoft.NET Framework 4 (Web Installer) prior to running the setup for Microsoft Attack Surface Analyzer. If you install it after you install Attack Surface Analyzer, you will have access only to the command line version of the tool. If you prefer to use a graphical user interface, install Microsoft.NET Framework 4 prior to installing Microsoft's Attack Surface Analyzer.

You can find the Attack Surface Analyzer here.

Microsoft Attack Surface Analyzer - What Does It Do?

Complete information about the tool can be found in the Attack Surface Analyzer Readme document. I strongly recommend that you to download and read this document.

To summarize the key points, Attack Surface Analyzer does the following:

• Scans your operating system to create a baseline of its security and vulnerability level;
• It is run again at any time (after you install drivers, updates, applications, etc) to capture the changes taking place in your system;
• Compares your baseline with any subsequent scan and shares a report of what has changed from a security and vulnerability perspective.

The report includes the security issues that were detected (vulnerable executables, directories with vulnerable executables, weak registry settings, vulnerable processes, threads and services, etc.) and complete information about what has changed inside your system (running processes, open windows, system modules, services, drivers, file registrations, Internet Explorer misconfigurations, firewall rules, etc).

How to Use Microsoft's Attack Surface Analyzer

Run Attack Surface Analyzer. Make sure "Run new scan" is selected and press Run Scan.

Wait for the data collection process to end. It will take a while, so arm yourself with some patience.

When, the data collection is done, you are returned to the initial screen and shown the path where the information from this scan was stored. This file should not be deleted as it will be the baseline against which you will make future comparisons.

After you install applications, drivers, everything you want to install and evaluate, run the tool again and make a new scan.

When the new scan is done, leave the tool open and select "Generate standard attack surface report".

Then, select the baseline file plus the file generated by the latest scan and press Generate.

An HTML report will be shown in Internet Explorer, with three sections: Report Summary, Security Issues and Attack Surface, all displaying useful information about your system's security and how it has changed compared to the baseline scan.

When Is This Tool Useful?

The Attack Surface Analyzer is a complex tool which displays important data in a very detailed manner. Therefore, its target audience is formed mostly by professionals and power users with good technical skills.

The tool can be useful in many scenarios, including: developing new software and testing its security vulnerabilities, evaluating the security issues existing on computers that are part of a network after you install the standard software that is required, evaluating the security issues of your own computer, after installing all the software you plan to use on a regular basis.

Related posts

• Sawirka Dekadaha Furan oo ku qiimee amniga nidaamkaaga Nmap

• Sida Loo Maareeyo Cusbooneysiinta Daaqadahaaga Rakibaadda & Qarsoon

• Soo bandhigida Windows 8.1: Sida loo hagaajiyo Qarsoodigaga Markaad Isticmaalayso Apps

• Sida loo furo, loo furo, ama si joogto ah loogu dhejiyo faylka VHD gudaha Windows 10 -

• Sida loo isticmaalo Windows USB/DVD Download Tool

• Sida loo hagaajiyo Windows 7 iyadoo la isticmaalayo Startup Repair

• Sida loo nadiifiyo Windows 10 adoo isticmaalaya Sense Kaydinta -

• Sida loo sameeyo iskaanka khadka tooska ah ee Difaaca Windows

• Isticmaal taariikhda Abka ee Maareeyaha Hawsha si aad u aragto isticmaalka abkaaga kheyraadka

• Sida loo nadiifiyo cookies-ka Firefox-ka ee Windows iyo macOS - WebSetNet

• Sida loo dejiyo oo loo habeeyo Adeegyada Goobta gudaha Windows 11 -

• Sida looga rogo taleefankaaga casriga ah Windows 10 Mobile ilaa Windows Phone 8.1

• Hel ilaalinta ransomware Windows 10 galitaanka galka la xakameeyey

• 11 saxannada badbaadinta fayraska ee bilaashka ah ee bilaashka ah ee loogu talagalay Windows PCs

• Kaaliyaha Cusboonaysiinta Windows 10: U cusboonaysii ilaa May 2021 Cusbooneysii maanta!

• Sida loo joojiyo xayeysiiska Windows 11 -

• 5 saxannada samatabbixinta nidaamka ugu fiican ee kombuyuutarrada Windows oo aan hadda si fiican u shaqayn

• Sida loo furo Command Prompt marka Windows uusan bootin (3 siyaabood)

• Sida loo daabaco liiska hababka socodsiinta ee Windows -

• 4 siyaabood oo lagu soo dejisan karo nooca buuxa ee Windows 11 bilaash -