---

Professional Windows Desktop and Server Hardening (Programmer to Programmer)

ISBN: 0764599909
EAN: 2147483647

Year: 2004
Pages: 122

Authors: Roger A. Grimes

BUY ON AMAZON

• Table of Contents
• Back Cover
• Professional Windows Desktop and Server Hardening
• Introduction
• Why Another Book on Windows Security?
• Who Is This Book For?
• What s in This Book?
• Conventions
• Source Code
• Errata
• p2p.wrox.com
• Part I: The Basics in Depth
• Chapter 1: Windows Attacks
• Attack Classes
• Types of Attacks
• Where Malware Hides
• Summary
• Chapter 2: Conventional and Unconventional Defenses
• Overall Defense Strategy
• Conventional Defenses
• Unconventional Defenses
• Summary
• Chapter 3: NTFS Permissions 101
• How Windows Security Works
• Share and NTFS Permissions
• Current Permission Settings
• Other Best Practice Recommendations
• Summary
• Part II: OS Hardening
• Chapter 4: Preventing Password Crackers
• Passwords Attacks, Tools, and Techniques
• Other Types of Password Attacks
• Defending Against Password Attacks
• Summary
• Chapter 5: Protecting High-Risk Files
• What Is a High-Risk File?
• High-Risk File and Program Examples
• High-Risk Windows Files
• File Defenses
• Summary
• Chapter 6: Protecting High-Risk Registry Entries
• Registry Introduction
• High-Risk Registry Entries
• Defenses
• Summary
• Chapter 7: Tightening Services
• Reduce Buffer Overflow Risks
• Services Introduction
• SC
• Common Windows Services and Recommendations
• Securing Services
• Summary
• Chapter 8: Using IPSec
• Introduction to IPSec
• Windows IPSec
• Using IPSec Security
• IPSec Attacks and Defenses
• Other IPSec Links
• Summary
• Part III: Application Security
• Chapter 9: Stopping Unauthorized Execution
• Deny-by-Default Software Execution
• Developing a Software Restriction Policy
• Methods to Prevent Unauthorized Execution
• Summary
• Chapter 10: Securing Internet Explorer
• Internet Explorer Attacks
• Internet Explorer Defenses
• Summary
• Chapter 11: Protecting E-Mail
• E-Mail Threats
• Securing E-Mail
• Summary
• Chapter 12: IIS Security
• IIS Basics
• Permissions
• Step Summary
• Securing IIS
• Summary
• Chapter 13: Using Encrypting File System
• Setting Up EFS
• EFS Caveats
• EFS Best Practices
• Other Links
• Summary
• Part IV: Automating Security
• Chapter 14: Group Policy Explained
• Group Policy Settings
• Summary
• Chapter 15: Designing a Secure Active Directory Infrastructure
• Parts of Active Directory Security Policies
• Efficient Active Directory Security Design
• Summary
• Book Summary
• Index
• A
• B
• C
• D
• E
• F
• G
• H
• I
• J
• K
• L
• M
• N
• O
• P
• Q
• R
• S
• T
• U
• V
• W
• X
• Z
• List of Sidebars