双因素认证以及文件过滤的系统安全增强策略  

Security Enhancement Strategy of Windows 10 Operating System based on Two Factor Authentication and File Filtering

作　　者：韩金池 丁汨 HAN Jin-chi;DING Mi(Zhengzhou Xindajie'an Information Technology Co.,Ltd,Zhengzhou450003,China;ZhengzhouShuqing Medical College,Zhengzhou 450064,China)

机构地区：[1]郑州信大捷安信息技术股份有限公司,河南郑州450003 [2]郑州澍清医学高等专科学校,河南郑州450064

出　　处：《电脑知识与技术》2020年第29期52-54,64,共4页Computer Knowledge and Technology

摘　　要：目前,绝大多数计算机操作系统是微软的Windows 10操作系统,而Windows 10操作系统不开源的特性,再结合该操作系统的个人数据与业务数据的混合存储以及其支持的应用程序的多样性,为广大用户工作生活带来方便的同时,也给计算机信息安全埋下了严重隐患。针对当前的主流操作系统Windows 10存在的安全隐患,通过对安全风险模型分析,从三个方面对系统进行安全增强:第一,双因素认证,保证了用户的合法性;第二,应用程序控制,降低了应用程序带来的风险;第三,数据传播途径控制,控制了敏感数据的外泄。试验表明,从三个方面入手进行系统安全增强,极大地提高了Win⁃dows 10操作系统的安全性,具有很强的实用性。At present,the vast majority of computer operating systems are Microsoft's windows 10 operating system.But the win⁃dows 10 operating system is not open-source,combined with the mixed storage of personal data and business data of the operating system and the diversity of the applications it supports,it brings convenience to the work and life of the majority of users,but also lays a serious hidden danger to the computer information security.In view of the security risks existing in the current mainstream op⁃erating system Windows 10,through the analysis of the security risk model,the security of the system is enhanced from three as⁃pects:first,two factor authentication ensures the legitimacy of users;second,application control reduces the risks brought by the application process;third,the control of data transmission channels controls the leakage of sensitive data.The test shows that the system security enhancement from three aspects greatly improves the security of windows 10 operating system and has strong practi⁃cability.

关 键 词：双因素认证 安全增强 文件过滤 国产密码模块 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]