Xinchuang operating system -- kylin kylin desktop operating system (project 10 security center)

Xinchuang operating system – kirin Kylin Desktop operating system ( Project 10 Security Center ）

---

---

Security Center

The security center is a system security management program developed by the Kirin security team , Its front page contains 【 Account security 】、【 Safety check up 】、【 Virus protection 】、【 Network protection 】 And 【 Application control and protection 】 Five modules , The system has been installed by default .

Security Center home page

single click 【 The start menu 】 Button , Find by scrolling the wheel with the mouse or by searching 【 Security Center 】 Options , Enter the home page of the Security Center , In the homepage interface , We can observe 【 Security accounts 】、【 Safety experience 】、【 Virus protection 】、【 Network protection 】、【 Application control and protection 】 Options , Pictured 1-1 Shown .

chart 1-1 Security Center home page

Account security

（1） The security center provides the system 【 Account password security 】 Check policy configuration ,【 The account 】 And 【 Login information shows 】 Configuration functions . Click on the 【 Account security 】 Button , Or in the left navigation window list 【 Account security 】 Option entry , stay 【 Account password security 】 In the options , We can observe 【 senior 】、【 intermediate 】 as well as 【 low-level 】 Option to display password strength setting rules , Pictured 1-2 Shown .

chart 1-2 Account security interface

（2） Check the above figure 1-2【 Account security interface 】-【 Account password security 】-【 Customize 】 Option can trigger 【 Password strength settings 】, stay 【 Password strength settings 】 in , We can observe 【 Password character setting 】、【 The password must contain at least the character type 】 And the number of letters, etc. to display the password strength setting rule options , Users can customize the password strength of the account through these rules , Pictured 1-3 Shown .

chart 1-3 Customize password strength settings

（3） In the figure 1-2 【 Account security interface 】 in , stay 【 The account 】 In the option, the user can configure whether to enable the account locking function . Enable 【 The account 】 After function , The user can set the password error threshold and the account locking duration .

（4） In the figure 1-2 【 Account security interface 】 in , stay 【 Login information shows 】 In the options, the user can set the last login information display and the historical login failure information display , And the settings are only valid for the console .

Safety experience

Safety examination is one of the important means to reinforce the system , Contains baseline items （ safety standards ） and CVE Vulnerability scanning and repair function .

（1） Click the left navigation window 【 Safety check up 】 Options , Enter the safety physical examination interface , Pictured 1-4 Shown , single click 【 Start physical examination 】 Button , Have a physical examination , Wait for the scan to complete （ In case of high risk , single click 【 One click fix 】 button , If not, click 【 return 】 button ）, Pictured 1-5 Shown .

chart 1-4 Physical examination completion interface

（2） Click the number after the scanned item , open 【 This physical examination 】 Pop up page , The corresponding situation after scanning can be observed , Pictured 1-5 Shown .

chart 1-5 Physical examination detailed data interface

（3） After the physical examination and repair , You can view the last physical examination , Pictured 1-6 Shown .

chart 1-6 View the last physical examination interface

Virus protection

【 Virus protection 】 The anti-virus programs installed in the current system are displayed in a centralized way . It shows that under the detection of each anti-virus program , System anti-virus to-do list 、 Virus protection status and software update status , At the same time, open applications are provided separately for each anti-virus program 、 Virus database update 、 Scan now 、 Update the four functions of authorization .

（1） Click the left navigation window 【 Virus protection 】 Options , Enter the virus protection interface ,（ If the system is not installed with the security management system of qi'anxin Wangshen terminal , Pictured 1-7 Shown ） If the system has been installed with the security management system of Qianxin Wangshen terminal , Pictured 1-8 Shown .

chart 1-7 The security management system interface of Anxin Wangshen terminal is not installed

chart 1-8 Install the security management system interface of Anxin Wangshen terminal

Network protection

（1） The security center provides default network protection policies and application networking control functions , To maintain the security of the system network environment . Click... In the left navigation window 【 Network protection 】 Option to enter the network protection interface , open 【 A firewall 】 Button , Pictured 1-9 Shown . stay 【 Kylin firewall 】 In the options, the user can observe 【 The public network 】、【 Office network 】 as well as 【 Customize 】 Options , among 【 Customize 】 Options , It is applicable to senior administrator users .

chart 1-9 Network protection interface

（2） In the picture above 1-3【 Network protection interface 】 in , single click 【 Customize 】 Options , Get into 【 Firewall custom settings 】 Interface , You can add... As required 、 Delete and edit function buttons on the service list 、 Modify the port protocol , Pictured 1-10 Shown .

chart 1-10 Firewall custom setting interface

（3） In the figure above 1-10 Firewall custom settings interface , Click... In the lower left corner “+” Button , You can add settings , The pop-up window is shown in the figure 1-11 Shown .

chart 1-11 Firewall new service setting interface

（4） In the figure 1-9【 Network protection interface 】 Medium 【 Application Networking 】 Option , Yes 【 Ban 】、【 inquiry 】 as well as 【 allow 】 Three states provide user selection , among 【 prohibit 】 and 【 inquiry 】 Option to trigger 【 Application networking configuration 】 Button , Click this button , Access to 【 Application networking configuration 】 Interface , After selecting the application , You can select the applied networking policy from the drop-down box , Pictured 1-12 Shown .

chart 1-12 Application networking configuration interface

Application control and protection

This module provides application execution control run mode settings , Source check 、 System white list 、 Process protection 、 Kernel protection and other protection mechanisms .

（1） Click... In the left navigation window 【 Application control and protection 】 Options , Enter the application control and protection interface . stay 【 Check application integrity 】 in , Yes 【 prevent 】、【 Warning 】 as well as 【 close 】 There are three options available to users , among 【 prevent 】 and 【 Warning 】 Can trigger 【 Application complete configuration 】, Pictured 1-13 Shown .

chart 1-13 Application control and protection interface

（2） In the figure above 1-13【 Application control and protection interface 】 in , single click 【 prevent 】 and 【 Warning 】 Can trigger 【 Application complete configuration 】 To configure ,【 Application complete configuration 】 Access to 【 Application integrity configuration 】 Interface , Applications added to the list , If integrity is damaged, direct operation is not allowed 、 Load management , Application integrity configuration , Pictured 1-14 Shown .

chart 1-14 Application integrity configuration interface

（3） If you click figure 1-13【 Application control and protection interface 】 Medium 【 Application protection 】 Opening options , This option provides the function of application protection mechanism of process anti kill and kernel module file anti uninstall , Start its application , Can trigger 【 Application protection configuration 】 Button , Get into 【 Application protection 】 Interface , Pictured 1-15 Shown .

chart 1-15 Application protection interface

（4） In the figure above 15【 Process anti kill 】 In the interface , single click 【+ add to 】 Button , Can be added to the process anti kill list , The system will prevent the program process from being killed , Pictured 1-16 Shown .

chart 1-16 Add anti kill process path interface

（5） In application protection 【 Kernel module anti uninstall 】 In the interface , This function can prevent the system from running normally due to missing kernel parameters caused by user's accidental deletion , Pictured 1-17 Shown .

chart 1-17 Application kernel module anti uninstall interface

---

Production members ： Zheng Weiqin
Typesetting ： Yuxin
Preliminary examination ： Yuxin
to review a case ： February 2

---

Click below “ Studio on the 16th of the first month ” See more learning resources

Studio on the 16th of the first month