Iyadoo la jaanqaadaysa heerarka DEFCON , Microsoft waxay soo bandhigtay " SECCON Framework " tusaale ahaan guud ahaan Windows 10 Qaab-dhismeedka Habaynta Amniga^{(Windows 10 Security Configuration Framework)} . Qaab-dhismeedkani waxa uu ka caawinayaa jaangooyooyinka goobaha amniga aasaasiga ah ee ay tahay in lagu dabaqo nidaamyada Windows 10 . Waxay ka kooban tahay hagitaan taxane ah oo gacan ka geysta hubinta tiro badan oo Windows 10 ah oo isku dubaridey deegaanno kala duwan.

Windows 10 Qaabdhismeedka Habaynta Amniga^{(Security Configuration Framework)} ama Qaabdhismeedka SECCON^{(SECCON Framework)}

Chris Jackson , Maamulaha Barnaamijka Maamulaha^{(Principal Program Manager)} ee Microsoft ayaa yiri,

We sat down and asked ourselves this question: if we didn’t know anything at all about your environment, what security policies and security controls would we suggest you implement first?

Natiijadu waxay ahayd waxa Microsoft u magacawday - Qaabka SECCON^{(The SECCON framework)} . Ku furista "Xarunta Shaqada Maamulaha^{(Administrator)} " ee heerka 1 ee dhismaha ilaa "Amniga Ganacsiga" ee heerka 5, Windows 10 qaabeynta qaabeynta amniga waa dadaalka Microsoft si loo fududeeyo loona habeeyo nidaamka amniga Windows 10 . Qaabayntan ammaanku maaha xal caalami ah, haddana qaabayn la fududeeyay kaas oo ay isticmaali karaan isticmaalayaasha heerka-shirkadeed si ay ula kulmaan habayn iyo xaalado badan oo aaladaha caadiga ah.

Shanta heer ee ku jira Windows 10 qaabeynta qaabeynta amniga

Windows 10 qaabeynta qaabeynta amniga ee shirkadaha waxaa lagu qeexay iyadoo lagu saleynayo "Scenarios Aaladda Caadiga ah" ee 5 heerar kala duwan oo ay leedahay Microsoft : Amniga^{(Enterprise Security)} Ganacsiga , Amniga Sare ee^{(Enterprise High Security)} Ganacsiga , Amniga VIP Enterprise^{(Enterprise VIP Security)} , DevOps Workstation , iyo Maamulka Shaqada^{(Administrator Workstation)} ; Heerarka 5^{(Levels 5)} - 1 siday u kala horreeyaan.

Halkan, tirooyinka hoose waxay muujinayaan heer sare oo adkeynta amniga. Kuwa soo socda ayaa ah 5ta heerar ee ku jira Windows 10 Qaab-dhismeedka Habaynta Amniga^{(Security Configuration Framework)} .

1. Heerka 5: Ammaanka Ganacsiga
2. Heerka 4: Ammaanka Sare ee Ganacsiga
3. Heerka 3: Amniga VIP Enterprise
4. Heerka 2: DevOps goobta shaqada
5. Heerka 1: Xarunta Shaqada Maamulka

Aan si kooban u sharaxno mid kasta oo ka mid ah heerarkan amniga:

1] Heerka 5 - Ammaanka Ganacsiga:^{(1] Level 5 – Enterprise Security:)}

Nabadgelyada ganacsiga^(Enterprise) ama heerka 5^{(Level 5)} waa habka ugu yar ee amniga aaladda ganacsiga. Heerka qaabeynta amniga ayaa ka kooban talooyinka guud ahaan toosan oo loogu talagalay in la geeyo 30 maalmood gudahood.

2] Heerka 4 - Ammaanka Sare ee Ganacsiga:^{(2] Level 4 – Enterprise High Security:)}

Qaabayntan waxa lagula talinayaa aaladaha ay isticmaalayaashu u baahan yihiin inay galaan macluumaadka sirta ah/xasaasiga ah. In yar oo ka mid ah kontarooladan ayaa saameyn ku yeelan kara iswaafajinta abka, sidaa awgeed inta badan waxay maraan hantidhawrka-habaynta-xoojinta socodka shaqada. Marka loo eego Microsoft , talooyinka heerka 2^{(Level 2)} waa ay heli karaan maamulayaasha iyo qaabaynta waxa la geyn karaa 90 maalmood gudahood.

3] Heerka 3 - Amniga VIP Enterprise:^{(3] Level 3 – Enterprise VIP Security:)}

Si gaar ah loogu talagalay aaladaha ay maamulaan ururrada leh koox ammaan oo ka weyn ama ka sii casrisan, ama isticmaalayaasha/kooxaha gaarka ah ee khatarta sare ku jira. Urur u nugul in la beegsado kooxaha sida wanaagsan loo maalgeliyay iyo kuwa xafiiltama waa in ay raacaan qaabayntan. Gelintu waxay noqon kartaa mid adag waxayna badanaa qaadan kartaa in ka badan 90 maalmood.

4] Heerka 2 - DevOps goobta shaqada:^{(4] Level 2 – DevOps workstation:)}

Microsoft waxay kula talisaa qaabayntan horumariyeyaasha iyo tijaabiyaasha, kuwaas oo ah bartilmaameed soo jiidasho leh maadaama ay ku jiraan nidaamyo haya xog qiimo sare leh ama ay wadaan hawlo ganacsi oo muhiim ah. Heerkan wali waa uu socdaa, Microsoft -na waxa ay ku dhawaaqi doontaa isla marka ay diyaar noqoto.

5] Heerka 1 - Goobta Shaqada Maamulka:^{(5] Level 1 – Administrator Workstation:)}

Shaqada Maamulaha^{(Administrator Workstation)} ama Heerka 1^{(Level 1)} gudaha Windows 10 Qaabdhismeedka Habaynta Amniga^{(Security Configuration Framework)} ( SEECON ) waxaa loogu talagalay maamulayaasha "la kulma khatarta ugu sareysa, iyada oo loo marayo xatooyada xogta, beddelka xogta, ama carqaladeynta adeegga."  ^{(“face the highest risk, through data theft, data alteration, or service disruption.”  )}Sida Heerka 4^{(Level 4)} , heerkani wuxuu sidoo kale ku socdaa horumar, Microsoft waxay ku dhawaaqi doontaa isla marka ay diyaar noqoto. Ka akhri wax badan oo ku saabsan heerkan Microsoft Docs .

Soocidda Xakamaynta Amniga

Iyadoo loo eegayo heerarka khatarta ah ee la xidhiidha nooc kasta oo qalab ah, the Windows 10 qaabeynta qaabeynta amniga ayaa aad u xaddidan heerarka hoose. Talooyinka heer kasta waxaa loo qaybiyaa 3 qaybood oo kala duwan:

• Siyaasadaha^(Policies) : Kuwani waxay soo jeedinayaan habaynta siyaasadaha amniga qaarkood ee aaladaha sida ku-dhaqanka dhererka erayga sirta ah ee ugu yar, shuruudaha kakanaanta erayga sirta ah, deminta xisaabaadka martida, xeerarka dab-damiska qaarkood, ama xaddididda xuquuqaha qaarkood kooxaha isticmaalaha.
• Xakamaynta^(Controls) : Kooxdani waxay ku talinaysaa isticmaalka sifada amniga gaarka ah ama codsiyada. Tusaale ahaan, kontaroolada heerka 5 waxay ku talinayaan in la habeeyo sifooyinka ^{(Level 5)}Difaaca Windows^{(Windows Defender)} qaarkood sida Codsiga Guard^{(Application Guard)} ama Ilaalada Aqoonsiga^{(Credential Guard)} oo laga dhigo Microsoft Edge browserka caadiga ah.
• Dabeecadaha^(Behaviors) : Kooxdani waxay qeexdaa hababka amniga sida ku rakibida cusboonaysiinta amniga muddo cayiman ka dib marka la sii daayo ama lagala wareego isticmaalayaasha ugu badan ee suurtogalka ah kooxda maamulka.

Microsoft waxay^(Microsoft) leedahay, kani waa nooc qabyo ah waxayna ka ururinayaan jawaab celin ururada doonaya inay hirgeliyaan barnaamijka adkaynta amniga aaladda. Waxaad wax badan ka akhrisan kartaa  docs.microsoft.com .

Windows 10 Security Configuration Framework for Enterprises

Mimicking the DEFCON levels, Microsoft divulgеd the “SECCON Framework” i.e. a generic Windows 10 Security Configuration Framework. This framework aids in standardizing the basic security settings that should be applied for Windows 10 systems. It consists of a series of guides which help in securing a range of Windows 10 configurations in diverse environments.

Windows 10 Security Configuration Framework or SECCON Framework

Chris Jackson, Principal Program Manager at Microsoft said,

We sat down and asked ourselves this question: if we didn’t know anything at all about your environment, what security policies and security controls would we suggest you implement first?

The result was what Microsoft has named – The SECCON framework. Opening with an “Administrator workstation” at level 1 building up to the “Enterprise security” at level 5, the Windows 10 security configuration framework is Microsoft’s effort to simplify and standardize the security system on Windows 10. This security configuration isn’t a universal solution, yet a simplified configuration which could be used by enterprise-level users to meet many common device configurations and scenarios.

The five levels in Windows 10 security configuration framework

Windows 10 security configuration framework for enterprises is defined based on “Common Device Scenarios” in 5 different levels by Microsoft: Enterprise Security, Enterprise High Security, Enterprise VIP Security, DevOps Workstation, and Administrator Workstation; Levels 5 – 1 respectively.

Here, the lower numbers indicate a higher degree of security hardening. Following are the 5 levels in Windows 10 Security Configuration Framework.

1. Level 5: Enterprise Security
2. Level 4: Enterprise High Security
3. Level 3: Enterprise VIP Security
4. Level 2: DevOps workstation
5. Level 1: Administrator Workstation

Let’s briefly explain each of these security levels:

1] Level 5 – Enterprise Security:

Enterprise security or Level 5 is the minimum-security configuration for an enterprise device. This security configuration level contains recommendations that are generally straightforward and designed to be deployed within 30 days.

2] Level 4 – Enterprise High Security:

This configuration is recommended for devices where users need to access confidential/sensitive information. Few of these controls can impact app compatibility, hence often pass through an audit-configure-enforce workflow. According to Microsoft, recommendations for Level 2 are accessible to the administrators and the configurations can be deployed within 90 days.

3] Level 3 – Enterprise VIP Security:

Aimed specifically at devices run by organizations having a larger or more sophisticated security team, or for specific users/groups who are at exclusively high risk. An organization who is prone to get targeted by well-funded and sophisticated rivals should pursue this configuration. Deploying this set of configurations may be complex and can often take more than 90 days.

4] Level 2 – DevOps workstation:

Microsoft recommends this configuration to the developers and testers, who are an attractive target since they are on systems holding high-value data or running critical business functions. This level is still under development, and Microsoft will make an announcement as soon as it’s ready.

5] Level 1 – Administrator Workstation:

Administrator Workstation or Level 1 in Windows 10 Security Configuration Framework (SEECON) is designed for administrators who “face the highest risk, through data theft, data alteration, or service disruption.”  Like Level 4, this level is also under development, and Microsoft will make an announcement as soon as it is ready. Read more about this level in the Microsoft Docs.

Security Control Classification

Owing to the risk levels associated with each device type, the Windows 10 security configuration framework is more restrictive in the lower levels. Recommendations for each level are alienated into 3 different categories:

• Policies: These suggest configuring certain security policies on devices like applying a minimum password length, password complexity requirements, deactivating guest accounts, certain firewall rules, or limiting certain rights to specific user groups.
• Controls: This group recommends the use of certain specific security features or applications. For example, Level 5 controls advise to configure certain Windows Defender features like Application Guard or Credential Guard and make Microsoft Edge the default browser.
• Behaviors: This group defines security processes like installing security updates in specific duration after release or confiscating as many users as possible from the administrator group.

Microsoft says, this is a draft version and they are gathering feedback from organizations who are looking to implement a device security tightening program. You can read more at  docs.microsoft.com.

Related posts

• Astaamaha Amniga Cusub ee Windows 11

• Sida gacanta loogu oggolaado faylka la xannibay ama app gudaha Amniga Windows

• Sida loo maamulo Shahaadooyinka xididka la aamini karo ee Windows 11/10

• 9 Windows 7 Features & Applications Aan Hadda Ka Jirin Windows 8

• Tilmaamaha Amniga Taleefanka Casriga ah ee Caadiga ah iyo Sida ay u Shaqeeyaan

• Muxuu ku sameeyaa barnaamijkan dib u bilaabashada Windows 11/10?

• Sida loo damiyo Wareegga Shaashada tooska ah ee Windows 11/10

• Sida loo khariidado Network Drive ama loogu daro FTP Drive gudaha Windows 11/10

• Sida loo isticmaalo Habka Wax-gelinta (IME) ee Windows 11/10 PC

• Waa maxay waayo-aragnimada OOBE ama ka-baxsan-sanduuqa gudaha Windows 11/10?

• Sida loo awood Wake-on-LAN gudaha Windows 11/10

• Local, LocalLow, faylalka roaming gudaha AppData on Windows 11/10

• Sida loo beddelo wararka iyo xiisaha Luqadda Quudinta gudaha Windows 11/10

• Sida loo wadaago bogga shabakadda URL addoo isticmaalaya browserka Microsoft Edge

• Sida loo suurtageliyo ama loo joojiyo Heerka Dib-u-cusboonaynta Dynamic Refresh (DRR) gudaha Windows 11

• Sida loo suurto geliyo ama loo joojiyo ama loo sameeyo Go'doominta Codsiga gudaha Windows 10

• Sida loo suurto geliyo ama loo joojiyo astaanta abka Archive gudaha Windows 11/10

• Daar ama dami sifooyinka Windows; Maamul sifooyinka Ikhtiyaarka ee Windows

• 8 siyaabood oo lagu bilaabi karo habaynta nidaamka Windows (dhammaan noocyada)

• Sida loo beddelo goobaha goobta Windows 11/10