Windows Xp Security Baseline Assessment Of Technical Research

In February 2005, in order to provide a uniform foundation for expression of security checklists, benchmarks, and other configuration guidance, NSA and NIST jointly released XCCDF.This paper is aimed at designing an XCCDF-based security assessment system for Windows XP. It can check the loopholes in the configuration and the patch version by OVAL and the situation of management through questionnaire, and then obtain security scores according to a security measurement model and generate the security assessment reports. The background of the relevant research is presented firstly in this paper. Then, the relevant security assessment standards, criteria, guides, methods and tools available and described, followed by the investigation results of XCCDF and OVAL. Next, it proposes and implements an XCCDF-based security assessment system for Windows XP, including the depiction of the architecture framework, flow graphs, sub-models, and the interface between them. In the following the chapter, it compares the performance of this system with other OS security assessment systems. In addition, it also analyzes the security assessment results of two hosts with different configurations with the same system with each other. Finally, the advantages and disadvantages of the system are summarized and the future work is proposed.