说明：  本论文为Windows Vista的改进的安全设置提供了一个深入的技术评估，主要侧重于地区的用户帐户保护和用户界面特权隔离。本文讨论这些功能和涉及的一些缺点，然后演示了如何从低完整性、低特区进程中获得对机器的完全控制。
(This paper provides an in-depth technical assessment of the security improvements implemented in Windows Vista, focusing primarily on the areas of User Account Protection and User Interface Privilege Isolation. This paper discusses these features and touches on several of their shortcomings. It then demonstrates how it is possible to combine these attacks to gain full control over the machine from low integrity, low privilege process.)