Detection Method Of The Windows 2000 Operating System Security Vulnerabilities And Security Countermeasures

System vulnerabilities are the flaws in the design and implementation of computer system's hardwares, softwares and protocols, or faults in configuration, incorrect security policies. Vulnerabilities do not harm to security of computer system with themselves, but security of computer systems can be harmed by exploiting vulnerabilities. So the research on vulnerabilities of Windows 2000 OS is very important for improving security of Windows 2000 OS and reducing security incidents.Based on presenting and analyzing existent taxonomy of vulnerability classification in computer system, a new method of vulnerability classification is given, which is used to classify vulnerabilities in Windows 2000 OS. And Windows 2000 OS vulnerability database is designed with the new method; Based on introducing and analyzing some existent techniques and tools of finding vulnerabilities, a new method of finding vulnerabilities is given, which is closed-code audit. A tool is implemented for finding vulnerabilities according to the new method of finding vulnerabilities.Based on analyzing characteristics of some current vulnerability databases, Windows 2000 OS vulnerability database is designed and implemented with the new method of vulnerability classification in this paper; There are two problems about implementing manual audit technique in project of security assessment , which are complexity and repetition. Windows 2000 security audit software is designed for solving the problems, the framework and function module of Windows 2000 security audit software are presented detailedly in this paper.In addition, a instance of security assessment is given and analyzing in this paper, and based on the analyzing of the instance, a modul of vulnerability countermeasure and some countermeasures against vulnerabilities of Windows 2000 OS are given.