Back Cover

Back Cover

It's not the computer. The hacker's first target is YOU!

A dirty little secret that vendors don't want you to know is that good computer security doesn't cost a thing. Any solution you can buy is guaranteed to fail. Malicious hackers use this fact to their advantage. Real security is gained by understanding the enemy's tactics and offsetting them with appropriate and consistently applied Windows settings. These expert authors realize that an effective strategy is two parts technology and one part psychology. Along with learning about Vista's new security features (such as UAC, integrity controls, BitLocker, Protected Mode, and IIS 7), learn common-sense recommendations that will immediately provide reliable value.

Vista Security Tips

• Have a healthy sense of paranoia
• Understand and apply the basics properly
• Use longer passwords. No, longer than that
• Use admin privilege very sparingly
• Don't believe Internet Explorer Protected Mode will stop all attacks
• Don't believe DEP can stop all attacks
• Don't believe any technology can stop all attacks

About the Authors

Roger A. Grimes (CPA, CISSP, CEH, CISA, MCSE: Security) is a 20-year Windows security veteran and four-time Microsoft Most Valuable Professional (MVP) for Windows security. Roger currently works for the Microsoft ACE Services team as a senior security consultant, but in the past has worked for Foundstone and consulted for dozens of the world's largest companies. This is Roger's seventh book on computer security. He is the author of over 200 magazine articles and he is the InfoWorld magazine security columnist and blogger.

Jesper M. Johansson is a security architect focusing on software security. Prior to his current position, he was an assistant professor at Boston University, and then a Senior Security Strategist at Microsoft where he worked in the Secure Windows Initiative and Trustworthy Computing Groups. He has worked in security for about 20 years and is the author of many articles and two books on the topic. He has delivered hundreds of presentations on security on every continent except Antarctica and South America and is a contributing editor to TechNet Magazine. Dr. Johansson has a Ph.D. in Management Information Systems and is a Certified Information Systems Security Professional (CISSP) and a certified Information Systems Security Architecture Professional (ISSAP).