Professional Windows Desktop and Server Hardening (Programmer to Programmer) - page 1
- 1
- 2
- Table of Contents
- Table of Contents
- Back Cover
- Professional Windows Desktop and Server Hardening
- Introduction
- Why Another Book on Windows Security?
- Who Is This Book For?
- What s in This Book?
- Conventions
- Source Code
- Errata
- p2p.wrox.com
- Part I: The Basics in Depth
- Chapter 1: Windows Attacks
- Attack Classes
- Types of Attacks
- Where Malware Hides
- Summary
- Chapter 2: Conventional and Unconventional Defenses
- Overall Defense Strategy
- Conventional Defenses
- Unconventional Defenses
- Summary
- Chapter 3: NTFS Permissions 101
- How Windows Security Works
- Share and NTFS Permissions
- Current Permission Settings
- Other Best Practice Recommendations
- Summary
- Part II: OS Hardening
- Chapter 4: Preventing Password Crackers
- Passwords Attacks, Tools, and Techniques
- Other Types of Password Attacks
- Defending Against Password Attacks
- Summary
- Chapter 5: Protecting High-Risk Files
- What Is a High-Risk File?
- High-Risk File and Program Examples
- High-Risk Windows Files
- File Defenses
- Summary
- Chapter 6: Protecting High-Risk Registry Entries
- Registry Introduction
- High-Risk Registry Entries
- Defenses
- Summary
- Chapter 7: Tightening Services
- Reduce Buffer Overflow Risks
- Services Introduction
- SC
- Common Windows Services and Recommendations
- Securing Services
- Summary
- Chapter 8: Using IPSec
- Introduction to IPSec
- Windows IPSec
- Using IPSec Security
- IPSec Attacks and Defenses
- Other IPSec Links
- Summary
- Part III: Application Security
- Chapter 9: Stopping Unauthorized Execution
- Deny-by-Default Software Execution
- Developing a Software Restriction Policy
- Methods to Prevent Unauthorized Execution
- Summary
- Chapter 10: Securing Internet Explorer
- Internet Explorer Attacks
- Internet Explorer Defenses
- Summary
- Chapter 11: Protecting E-Mail
- E-Mail Threats
- Securing E-Mail
- Summary
- Chapter 12: IIS Security
- IIS Basics
- Permissions
- Step Summary
- Securing IIS
- Summary
- 1
- 2
