NIST Site Search
Search NIST.GOV
Custom Search
[Official NIST.GOV TIME]
Product Research

Advertise on this site
NIST SP 800-69 (draft) Guidance for Securing Microsoft Windows XP Home Edition
A NIST Security Configuration Checklist
on Monday 14 August 2006 print the content item {PDF=create pdf file of the content item^plugin:content.58}
in NIST.gov Publications > Special Publications - SP 800 series

SP 800-69 should be considered essential reading for all Windows XP Home Edition users. It does a very good job of summarizing the various threats facing home computer users and lists simple ways for users to mitigate them without having to be technically proficient.

You can download the NIST Special Publication 800-69 from NIST.gov

This document should be considered essential reading for all Windows XP Home Edition users. But that is asking a lot, the SP 800-69 document is 169 pages. However it does a very good job of summarizing the various threats facing home computer users and lists simple ways for users to mitigate them without having to be technically proficient. Surprisingly the document also goes out on a limb in a few places such as listing services that users can disable. It won't make anyone a security expert but it will give the average computer user a much better understanding of the threats they face every time they use their computer online. It even covers wireless networking, re-installation of the operating system, backups, and step-by-step instructions on how configure many of the security features that are built-in to Windows XP Home Edition.


(The below is a short description of SP 800-69 from NIST.gov, edited)

The draft SP 800-69 provides a checklist and guidance to home users, such as telecommuting Federal employees, on improving the security of their home computers that run Windows XP Home Edition. These computers face many threats from people wanting to cause mischief and disruption, commit fraud, and perform identity theft. The publication explains the need to use a combination of security protections to achieve a defense in depth. Thee protections include such as: antivirus software, antispyware software, a personal firewall, limited user accounts, and automatic software updates, to secure a computer against threats and maintain its security. It also emphasizes the importance of performing regular backups to ensure that user data is available after an adverse event such as an attack against the computer, a hardware failure, or human error. The publication contains a detailed step-by-step directions for securing Windows XP Home Edition computers that can be performed by experienced Windows XP Home Edition users.

Users of Windows XP Home Edition need to be aware of the threats that their computers face and the security protections available to protect their computers so that they can operate their computers more securely. Security protections are measures used to thwart threats.

Summary:

One of the most important parts of securing a Windows XP Home Edition computer is eliminating known weaknesses, because attackers could attempt to take advantage of them. Five categories of methods for eliminating weaknesses are as follows:
  • Limiting access to the computer through separate password-protected user accounts for each person, with different accounts for administrative and daily tasks (a limited user account)
  • Applying software updates to the computer on a regular basis, including Windows XP Home Edition and software applications
  • Limiting network access by disabling unneeded networking features, limiting the use of remote access utilities and Internet Connection Sharing, and configuring wireless networking securely
  • Modifying default file associations and the display of default file extensions
  • Disabling services that are not needed.


The five most important protections that should be used for Windows XP Home Edition computers connecting to the Internet are as follows:
  • Using a personal firewall that is configured to restrict incoming network activity to only that which is required
  • Using a limited user account for typical daily use of the computer
  • Running up-to-date antivirus software and antispyware software that is configured to monitor the computer and applications often used to spread malware (e.g., e-mail, Web) and to quarantine or delete any identified malware
  • Applying updates to the operating system and major applications (e.g., e-mail clients, Web browsers) regularly, preferably through automated means that check for updates frequently
  • Performing regular backups so that data can be restored in case an adverse event occurs.


---
The SP 800-69 document was created by the National Institute of Standards and Technology and is public domain (not subject to copyright).


NIST Special Publication # 800-69


Translate to: {GOOGLETRANS}
Google Ads




Headlines

»CVE-2012-5361 (ffmpeg)
Libavcodec in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corrup ...
»CVE-2013-6446
The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/ ...
»CVE-2014-0229
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2 ...
»CVE-2014-7279
The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote atta ...
»CVE-2014-8731
PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vector ...
»CVE-2014-9832 (imagemagick)
Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.
»CVE-2014-9833 (imagemagick)
Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
»CVE-2014-9834 (imagemagick)
Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
»CVE-2014-9835 (imagemagick)
Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
»CVE-2014-9836 (imagemagick)
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.
»CVE-2014-9838 (imagemagick)
magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).
»CVE-2014-9839 (imagemagick)
magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of servic ...
»CVE-2014-9840 (imagemagick)
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via ...
»CVE-2014-9841 (imagemagick, leap, opensuse, suse_linux_enterprise_desktop, suse_linux_enterprise_server, suse_linux_enterprise_software_development_kit, suse_linux_enterprise_workstation_extension, ubuntu_linux)
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have un ...
»CVE-2014-9842 (imagemagick, leap, opensuse, suse_linux_enterprise_debuginfo, suse_linux_enterprise_desktop, suse_linux_enterprise_server, suse_linux_enterprise_software_development_kit, suse_linux_enterprise_workstation_extension, ubuntu_linux)
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attac ...


Date published: 2017-03-25T14:00:01Z
Details

»Apple Releases Security Update for iTunes
Original release date: March 24, 2017 Apple has released a security update for Apple iTunes t ...
»Aviation Phishing Scams
Original release date: March 23, 2017 US-CERT has received reports of email-based phishing ca ...
»Cisco Releases Security Updates
Original release date: March 22, 2017 Cisco has released security updates to address vulnerab ...
»Vulnerabilities Identified in Network Time Protocol Daemon (ntpd)
Original release date: March 22, 2017 The Network Time Foundation's NTP Project has has relea ...
»Cisco Releases Security Updates
Original release date: March 21, 2017 Cisco has released security updates to address vulnerab ...
»IRS Warns of Last-Minute Tax Scams
Original release date: March 17, 2017 The Internal Revenue Service (IRS) has released an aler ...
»Mozilla Releases Security Updates
Original release date: March 17, 2017 Mozilla has released security updates to address a vuln ...
»Microsoft Ending Support for Windows Vista
Original release date: March 17, 2017 All software products have a lifecycle. After April 11, ...
»Microsoft SMBv1 Vulnerability
Original release date: March 16, 2017 Microsoft has released a security update to address a v ...
»Cisco Releases Security Updates
Original release date: March 15, 2017 Cisco has released several updates to address vulnerabi ...


Date published: not known
Details

»Mostly blocked, but still good enough: Necurs sending pump-and-dump spam
The Necurs botnet has started sending pump-and-dump spam. Almost al ...
»Why the SHA-1 collision means you should stop using the algorithm
Realistically speaking, if your software or system uses the SHA-1 h ...
»VB2017 Call for Papers: frequently asked questions
The call for papers for VB2017, which takes place 4 to 6 October i ...
»Throwback Thursday: Michelangelo - Graffiti Not Art
This week marked the 25th anniversary of the trigger date of the in ...
»How are you defending your network? Come and tell us at VB2017!
Is it your job to defend your company’s network? Are you defending ...
»Quick impressions from BSides Budapest
At Virus Bulletin, we love the BSides concept and we have attended ...
»First sponsors of VB2017 announced
We are excited to announce the first five sponsors of VB2017, compa ...
»Security products and HTTPS: let's do it better
A recent paper showed that many HTTPS-intercepting security solutio ...
»The SHA-1 hashing algorithm has been 'shattered'
Researchers from Google and CWI Amsterdam have created the first kn ...


Date published: not known
Details
Main Menu
· Home
Current Security News
 
US-CERT Current Activity

» Apple Releases Security Update for iTunes
[24 Mar 2017 12:07pm]

» Aviation Phishing Scams
[23 Mar 2017 02:27pm]

» Cisco Releases Security Updates
[22 Mar 2017 04:02pm]

» Vulnerabilities Identified in Network Time Protocol Daemon (ntpd)
[22 Mar 2017 11:20am]

» Cisco Releases Security Updates
[21 Mar 2017 09:57am]

» IRS Warns of Last-Minute Tax Scams
[17 Mar 2017 09:21pm]

» Mozilla Releases Security Updates
[17 Mar 2017 06:54pm]

» Microsoft Ending Support for Windows Vista
[16 Mar 2017 10:45pm]

» Microsoft SMBv1 Vulnerability
[16 Mar 2017 04:12pm]

» Cisco Releases Security Updates
[15 Mar 2017 06:26pm]

***
US-CERT Alerts

» TA17-075A: HTTPS Interception Weakens TLS Security
[16 Mar 2017 06:40am]

» TA16-336A: Avalanche (crimeware-as-a-service infrastructure)
[30 Nov 2016 10:00pm]

» TA16-288A: Heightened DDoS Threat Posed by Mirai and Other Botnets
[14 Oct 2016 05:59pm]

» TA16-250A: The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations
[06 Sep 2016 04:29pm]

» TA16-187A: Symantec and Norton Security Products Contain Critical Vulnerabilities
[05 Jul 2016 08:50am]

» TA16-144A: WPAD Name Collision Vulnerability
[23 May 2016 05:38am]

» TA16-132A: Exploitation of SAP Business Applications
[11 May 2016 05:31am]

» TA16-105A: Apple Ends Support for QuickTime for Windows; New Vulnerabilities Announced
[14 Apr 2016 01:48pm]

» TA16-091A: Ransomware and Recent Variants
[31 Mar 2016 04:00pm]

» TA15-337A: Dorkbot
[03 Dec 2015 04:40pm]

***
Computerworld Security

» How to protect yourself from ATM crime
[25 Mar 2017 05:00am]

» CIA, WikiLeaks and Doctor Who?
[24 Mar 2017 03:55pm]

» Apple: Macs and iPhones are safe from newly revealed CIA exploits
[24 Mar 2017 01:11pm]

» Google Play faces cat-and-mouse game with Android malware
[24 Mar 2017 12:16pm]

» To punish Symantec, Google may distrust a third of the web's SSL certificates
[24 Mar 2017 11:32am]

» FBI director floats international framework on encrypted data access
[23 Mar 2017 04:21pm]

» Leaked iCloud credentials came from third parties, Apple says
[23 Mar 2017 03:13pm]

» Google: Half of Android devices haven’t been patched in a year or more
[23 Mar 2017 01:41pm]

» Newly leaked documents show low-level CIA Mac and iPhone hacks
[23 Mar 2017 12:53pm]

» Senate votes to kill FCC's broadband privacy rules
[23 Mar 2017 11:13am]

» Snowden's ex-boss offers advice on stopping insider threats
[23 Mar 2017 11:10am]

» Look before you leap: 4 hard truths about IoT
[23 Mar 2017 06:21am]

» LastPass fixes serious password leak flaws
[22 Mar 2017 03:21pm]

» iPhone, Mac owners: How to stymie hackers extorting Apple, threatening to wipe devices
[22 Mar 2017 02:23pm]

» Google cites progress in Android security, but patching issues linger
[22 Mar 2017 01:41pm]

***
Microsoft Security Advisories

» 3123479 - SHA-1 Hashing Algorithm for Microsoft Root Certificate Program - Version: 2.0
[14 Mar 2017 11:00am]

» 4010983 - Vulnerability in ASP.NET Core MVC 1.1.0 Could Allow Denial of Service - Version: 1.0
[27 Jan 2017 11:00am]

» 3214296 - Vulnerabilities in Identity Model Extensions Token Signing Verification Could Allow Elevation of Privilege - Version: 1.0
[10 Jan 2017 11:00am]

» 3181759 - Vulnerabilities in ASP.NET Core View Components Could Allow Elevation of Privilege - Version: 1.0
[13 Sep 2016 11:00am]

» 3174644 - Updated Support for Diffie-Hellman Key Exchange - Version: 1.0
[13 Sep 2016 11:00am]

» 3179528 - Update for Kernel Mode Blacklist - Version: 1.0
[09 Aug 2016 11:00am]

» 2880823 - Deprecation of SHA-1 Hashing Algorithm for Microsoft Root Certificate Program - Version: 2.0
[18 May 2016 11:00am]

» 3155527 - Update to Cipher Suites for FalseStart - Version: 1.0
[10 May 2016 11:00am]

» 3152550 - Update to Improve Wireless Mouse Input Filtering - Version: 1.1
[22 Apr 2016 11:00am]

» 3137909 - Vulnerabilities in ASP.NET Templates Could Allow Tampering - Version: 1.1
[10 Feb 2016 11:00am]

» 2871997 - Update to Improve Credentials Protection and Management - Version: 5.0
[09 Feb 2016 11:00am]

» 3109853 - Update to Improve TLS Session Resumption Interoperability - Version: 1.0
[12 Jan 2016 11:00am]

» 3118753 - Updates for ActiveX Kill Bits 3118753 - Version: 1.0
[12 Jan 2016 11:00am]

» 2755801 - Update for Vulnerabilities in Adobe Flash Player in Internet Explorer and Microsoft Edge - Version: 53.0
[05 Jan 2016 11:00am]

» 3123040 - Inadvertently Disclosed Digital Certificate Could Allow Spoofing - Version: 1.0
[08 Dec 2015 11:00am]

***
WIRED

» Security News This Week: FedEx Offered Customers Five Bucks to Re-Install Flash
[25 Mar 2017 05:00am]

» Instagram Has Two-Factor Authentication Now, So Turn It On
[23 Mar 2017 01:30pm]

» WikiLeaks Reveals How the CIA Can Hack a Mac’s Hidden Code
[23 Mar 2017 12:09pm]

» The Clever ‘DoubleAgent’ Attack Turns Antivirus Into Malware
[23 Mar 2017 09:33am]

» Don’t Buy the Latest Trump Surveillance Hype
[22 Mar 2017 04:18pm]

» Good News: Android’s Huge Security Problem Is Getting Less Huge
[22 Mar 2017 08:00am]

» A Cybersecurity Arsenal That’ll Help ‘Protect Your Election’
[21 Mar 2017 05:00am]

» Inside the Hunt for Russia’s Most Notorious Hacker
[21 Mar 2017 04:00am]

» Russia? Nah. The House GOP Goes After Leakers Instead
[20 Mar 2017 04:02pm]

» Trump’s TSA Budget Fails to Cut the Obvious: Air Marshals
[20 Mar 2017 12:00pm]

***
Network World Security

» Consultant urges never pay ransomware demands
[24 Mar 2017 03:40pm]

» Apple: Macs and iPhones are safe from newly revealed CIA exploits
[24 Mar 2017 12:58pm]

» IDG Contributor Network: 7 best practices for securing your cloud service
[24 Mar 2017 12:36pm]

» Google Play faces cat and mouse game with sneaky Android malware
[24 Mar 2017 12:16pm]

» Review: Canary Flex security camera lives up to its name
[24 Mar 2017 07:01am]

» Smackdown: Office 365 vs. G Suite management
[16 Mar 2017 07:01am]

» Zix wins 5-vendor email encryption shootout
[13 Mar 2017 04:00am]

» Review: vArmour flips security on its head
[06 Mar 2017 03:50am]

» 5 open source security tools too good to ignore
[21 Feb 2017 07:12am]

» Review: Samsung SmartCam PT network camera
[15 Feb 2017 07:00am]

» Review: Arlo Pro cameras offer true flexibility for home security
[09 Feb 2017 07:01am]

» Face-off: Oracle vs. CA for identity management
[26 Jan 2017 10:30am]

» 6 steps to secure a home security camera
[23 Jan 2017 04:00am]

» CIA, WikiLeaks and Doctor Who?
[24 Mar 2017 03:55pm]

» Apple: Macs and iPhones are safe from newly revealed CIA exploits
[24 Mar 2017 12:58pm]

***


More IT Security
News Feeds
More Sponsors

Advertise on this site
RSS Feeds
Our news can be syndicated by using these rss feeds.
rss1.0
rss2.0
rdf

NIST.org is in no way connected to the U.S. government site NIST.gov

This site is © John Herron, CISSP. All Rights Reserved.

Please visit daily to stay up to date on all your IT Security compliance issues.

http://www.nist.org -
Hosted by BlueHost. We've never had a better hosting company.
{THEMEDISCLAIMER}