What Is a Server Message Block?

The server message block protocol is a network file system access protocol designed and implemented by Microsoft Corporation. Windows clients use this protocol to send file access requests to the Windows server. Abbreviated as SMB. The current version of the SMB protocol is CIFS (Common Internet File System, Common Internet File System).

Server Message Block (SMB for short), a

SMB can operate on top of the session layer or lower network layers in different ways:

• Run directly

  SMB was originally

  For many years, the protocols and components that Microsoft directly implements have many security vulnerabilities. The security holes of other vendors are mainly due to the lack of support for newer authentication protocols such as NTLMv2 and Kerberos in favor of NTLMv1, LanMan, or plain text passwords. Real-time attack tracking shows that SMB is one of the main attack vectors for intrusion attempts, such as the hacking incident of Sony Pictures in 2014 and the WannaCry ransomware attack in 2017. ^[2]