Gemeinsamer Workshop von Universitaetsrechenzentrum und Professur Rechnernetze und verteilte Systeme der Fakultaet fuer Informatik der TU Chemnitz. Anwendungssoftware im Administrationst des URZ für Windows

International Telemetering Conference Proceedings / October 27-30, 1997 / Riviera Hotel and Convention Center, Las Vegas, Nevada / There is a continuing need in the aerospace industry for lower cost and more maintainable telemetry data processing systems that can deliver a high level of performance. While systems based on the Intel family of x86 processors and Microsoft operating systems have seen increasing use in lower performance and portable applications, UNIX/VME based systems have been necessary to achieve required performance in higher end, multi-stream applications. Recent developments in the computer industry now promise lower cost alternative to these systems. With currently available technology, it is now possible to provide a powerful distributed processor architecture based entirely on commercial products. The system takes advantage of the latest of Intel Pentium processors, the PCI bus, 100BaseT Fast Ethernet, Microsoft Windows NT, ActiveX technology and NT servers. The architecture offers both current and future cost advantages for test facilities which must support a diverse set of requirements and which must maintain and support systems for many years.

No description available.

Dissertação (mestrado)—Universidade de Brasília, Faculdade de Tecnologia, Departamento de Engenharia Elétrica, 2012. / Submitted by Jaqueline Ferreira de Souza (jaquefs.braz@gmail.com) on 2012-06-28T11:58:39Z No. of bitstreams: 1 2012_CleberScoralickJunior.pdf: 2196236 bytes, checksum: d6baffb961530828f2ef7dd9de540423 (MD5) / Approved for entry into archive by Jaqueline Ferreira de Souza(jaquefs.braz@gmail.com) on 2012-06-28T11:59:43Z (GMT) No. of bitstreams: 1 2012_CleberScoralickJunior.pdf: 2196236 bytes, checksum: d6baffb961530828f2ef7dd9de540423 (MD5) / Made available in DSpace on 2012-06-28T11:59:43Z (GMT). No. of bitstreams: 1 2012_CleberScoralickJunior.pdf: 2196236 bytes, checksum: d6baffb961530828f2ef7dd9de540423 (MD5) / Metadados de arquivos e pastas em sistemas de arquivos armazenam informações relevantes para a análise pericial, com destaque para os rótulos de tempo. No entanto, esses rótulos podem ser afetados por configurações erradas do relógio, problemas de alimentação elétrica ou alterações intencionais dos rótulos de tempo ou do relógio do sistema, exigindo do examinador maior cuidado em sua análise. Dessa forma, este trabalho tem como objetivo determinar procedimentos periciais de informática em sistemas de arquivos NTFS (New Techonologies File System), na plataforma Windows XP, que permitam afirmar acerca do grau de contabilidade dos rótulos de tempo, indicar a quais operações os arquivos e pastas de interesse foram submetidos, bem como elaborar uma linha de tempo. Em uma máquina virtual Windows XP, foram realizadas simulações de operações com arquivos e pastas e um estudo de seus efeitos nos rótulos de tempo. Além das simulações de operações comuns, foram testadas alterações intencionais nos rótulos de tempo e no relógio do sistema, o efeito de varreduras do Windows Media Player e de programas antivírus, além de transferências de arquivos e pastas de um sistema FAT (File Allocation Table) para o sistema NTFS. Investigou-se também como a geração de pontos de restauração pelo Windows pode contribuir para a análise temporal. Para exposição dos resultados dos experimentos, foram elaboradas tabelas que apresentam relações cronológicas entre os rótulos de tempo dos atributos analisados, relações de igualdade e desigualdade entre rótulos de atributos diferentes e características dos rótulos de tempo para cada operação analisada. Esses resultados permitem, na maioria dos casos, individualizar as operações. Os programas para manipulação dos rótulos de tempo avaliados mostraram-se ineficazes, pois não impediram que, no exame pericial, tanto a alteração quanto o instante em que ocorreram fossem detectados. Constatou-se também que é possível detectar arquivos alterados com o relógio do sistema manipulado, sendo necessário avaliar o campo LSN ($LogFile Sequence Number) dos arquivos de interesse e os que apresentam valores próximos, juntamente com seus rótulos de tempo. A análise do Registro ativo e de suas cópias armazenadas nos pontos de restauração mostrou-se importante para determinar configurações relevantes para a análise temporal. Finalmente, os resultados obtidos foram aplicados em um caso real, permitindo a afirmação da autenticidade dos arquivos questionados e a elaboração de suas linhas de tempo. _________________________________________________________________________________ ABSTRACT / Timestamps within file system metadata hold important forensic information. However, their analysis is not straightforward, as they can be unwittingly tampered as a result of the computer clock being incorrect, low clock battery or time zone/day-light saving time misconfiguration. They can also be deliberately manipulated with direct tampering of timestamps or of the computer clock. This study intends to determine digital forensic procedures for NTFS (New Techonologies File System) file systems on Windows XP. These procedures would allow investigators to assess the reliability of timestamps and determine the operations to which files and folders were submitted to and generate their timeline. The most common operations on files and folders were performed on a Windows XP virtual machine and their effects on NTFS timestamps were evaluated. Direct timestamp and computer clock tampering, scans by Windows Media Player and antivirus programs and FAT (File Allocation Table) to NTFS file transfers were also evaluated. Files generated by restore point were also forensically investigated. As a result, we developed tables containing chronological relationships between timestamps, comparisons of timestamps between attributes and timestamp characteristics of some operations, allowing distinguishing among most of the analyzed operations. Several timestamp manipulation programs were tested and proved to be ineffective because a forensic analysis is capable to identify the manipulation and also to end out its time of occurrence. Computer clock tampering can also be detected by evaluating the LSN ($LogFile Sequence Number) and timestamps of the files under investigation and also of the ones with close LSN values. The operating system Registry and its backup copies stored on restore points should be examined to determine system configurations at the time of analysis. The results from this study were applied to a real case and allowed the determination of the authenticity of files and supported the creation of their timeline.

Orientador: Celio Cardoso Guimarães / Dissertação (mestrado) - Universidade Estadual de Campinas, Instituto de Computação / Made available in DSpace on 2018-07-28T09:21:12Z (GMT). No. of bitstreams: 1 Granado_MarcusCunha_M.pdf: 24944658 bytes, checksum: 511feafcfab73a86a468d2a4d08d1245 (MD5) Previous issue date: 2001 / Resumo: Esta dissertação de mestrado visa analisar a segurança dos protocolos de comunicação do sistema operacional Windows NT da Microsoft, especialmente quando usados em ambientes corporativos, onde é importante determinar se informações sigilosas estão adequadamente protegidas. Várias falhas importantes, de difícil correção, encontradas dispersas na bibliografia, foram apontadas e agrupadas. Novas e importantes vulnerabilidades foram descobertas, mostrando que mesmo o Windows 2000, a última versão deste sistema operacional, está sujeita a ataques eficientes que permitem sobrepujar esses protocolos de comunicação para obter informações sigilosas. / Abstract: This master thesis aims to assess Microsoft Windows NT operating system communication protocols security, mainly when used in corporation environments, where it is important to ascertain if sensitive information is adequately secured. Several important security faults, which are difficult to correct and are dispersed in bibliography, were pointed and grouped. Important new vulnerabilities were discovered, showing that even Windows 2000, the last version of this operating system, is subject to efficient attacks that allow supplanting those communication protocols in order to obtain sensitive information. / Mestrado / Mestre em Ciência da Computação

Gemeinsamer Workshop von Universitaetsrechenzentrum und Professur Rechnernetze und verteilte Systeme der Fakultaet fuer Informatik der TU Chemnitz. Anwendungssoftware im Administrationst des URZ für Windows

International Telemetering Conference Proceedings / October 23-26, 2000 / Town & Country Hotel and Conference Center, San Diego, California / This paper describes a PC-based Advanced Telemetry Processing and Display System (ATPDS)- a highend, real-time telemetry processing and display system implemented on a COTS PC platform. for A network-centric architecture was chosen from candidate architectures as the most viable for the ATPDS. The network-centric architecture is Windows NT-based, client/server based, supporting clients and servers on both local or remote PC workstations. The architecture supports distributing processing loads across multiple workstations, optimizing mission processing requirements. The advantage of this system is its flexibility and expandability with low acquisition and life-cycle support costs. The ATPDS allows the user to configure one or more small systems into a larger high-end system based on varying mission requirements.

International Telemetering Conference Proceedings / October 23-26, 2000 / Town & Country Hotel and Conference Center, San Diego, California / This paper describes a Multi-Function Telemetry Input Module (TIM). The TIM module includes a 30 Mbps PCM frame synchronizer, a time code translator/generator, a PCM simulator and a tunable bit synchronizer all on a single PCI card. The module uses a generic architecture including: high density Field Programmable Gate Arrays (FPGAs), look-up table memory, dual port A/B data buffer memory and a full function PCI interface. The FPGA and the logic function of the card are downloadable via the PCI interface. This allows a single module to support many hardware functions in a telemetry front-end. The TIM is an integral part of a PC-based Advanced Telemetry Processing and Display System. This concept for hardware design ushers in a new generation of flexible downloadable telemetry products.

International Telemetering Conference Proceedings / October 27-30, 1997 / Riviera Hotel and Convention Center, Las Vegas, Nevada / There is a wave of change coming. It started in the industrial automation community and it is slowly and surely working its way into aerospace, satellite and telemetry applications. It’s called the PC, and its not just for simple quick-look data anymore. Using state-of-the-art commercial hardware and software technologies, PC-based architectures can now be used to perform self contained, reliable and high performance telemetry data acquisition and processing functions – previously the domain of expensive, dedicated front end systems. This paper will discuss many of the key enabling technologies and will provide examples of their use in a truly next generation system architecture based on the Microsoft® Windows NT Operating System and related features.

Orientadores: Paulo Licio de Geus, Celio Cardoso Guimarães / Dissertação (mestrado) - Universidade Estadual de Campinas, Instituto de Computação / Made available in DSpace on 2018-10-23T18:32:47Z (GMT). No. of bitstreams: 1 Augusto_Alessandro_M.pdf: 2569490 bytes, checksum: 8aa4bc90d8198ce4e3a94a8f7e8f5332 (MD5) Previous issue date: 2001 / Resumo: A administração, a manutenção da segurança e o gerenciamento de grandes redes de computadores baseados em Windows NT são tarefas desafiadoras e trabalhosas. Algumas tarefas podem se tornar extremamente laboriosas para os administradores dessas redes, como por exemplo: instalação remota de programas, auditoria e modificação de uma configuração de segurança remota ou melhorar o desempenho de cada máquina. Este trabalho tem como objetivo desenvolver técnicas para automatizar as tarefas de administração de redes Windows NT, tornando-as menos complexas. Além disso, este trabalho apresenta e descreve DoIt4Me ("do it for me"), uma ferramenta de gerenciamento remoto capaz de melhorar a segurança, a administração e o desempenho de cada máquina dessas redes / Abstract: The administration, the maintenance of the security and the management of large Windows NT networks are challenging tasks. Some tasks can be extremely laborious, such as: software remote install action, auditing and updating the security configurations or to improve the performance of each network machine. The goal of this work is to develop techniques to automate network administra tive tasks, turning them less complexo Besides that, this work presents DoIt4Me ("do it for me"), a network management tool to improve the security, the administration and the performance of each network machine / Mestrado / Mestre em Ciência da Computação