A Novel Approach to Mitigate SMB Based Vulnerabilities in Operating System

Computer Engineering

IT Infrastructure comprises set of hardware devices and software. Today every organization has its own IT Infrastructure in which different hardware devices like computers, laptops, networking devices, servers operating systems and different software are used daily as core part of organization without these components IT Infrastructure cannot function. Technology upgrades itself very fast, to pace with this changes Organization should also have to upgrade technology. The security risk is come in form of vulnerability. Vulnerabilities can be present anywhere in operating system, various services in OS, applications or utility, third party tools etc. Because of vulnerable systems hacker or malicious user can perform malicious activities like hacking systems, servers, data stealing, attacking DOS attack on IT Infrastructure to disrupt the business. It is next to impossible for any organization to give full protection to business or data from all vulnerabilities present into the system. But the data can be protect if the vulnerability can be identified and patch. Applying extra layers of security or secure configuration of operating system or endpoint, the impact of vulnerability can be reduced. The process of vulnerability identification and patching or mitigation is known as Vulnerability Management. Due to technology upgradation vulnerability management is very important and continuous task. Our research mainly focuses on Infrastructure Vulnerability Assessment, exploitation and mitigation with patch management. The main object of this research is to identifying vulnerable services inside operating system and mitigate that Operating System service related vulnerability with security configurations. In this research the primary focus is upon Server Message Block vulnerability which is also known as EternalBlue part of Vault 7 project of secret agency.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.