Features

Features

• Buffer Overruns: Example sins

  Buffer overruns are among the most widespread and serious vulnerabilities. This excerpt from Chapter 1 of The 19 Deadly Sins of Software Security, details a few examples of buffer overruns from the Common Vulnerabilities and Exposures (CVE) ...  Continue Reading

• Buffer Overruns: Spotting the sin

  Spotting buffer overruns during code review ranges from being very easy to extremely difficult. This excerpt from Chapter 1 of The 19 Deadly Sins of Software Security offers testing techniques for uncovering these code exploits.  Continue Reading

• Buffer Overruns: The sin explained

  What is a buffer overrun? This excerpt from Chapter 1 of The 19 Deadly Sins of Software Security, defines this "sin" and examines why it is so often exploited.  Continue Reading

• Buffer Overruns: Redemption steps

  There is a variety of techniques to help you avoid buffer overruns, and a number of other techniques to reduce the damage it can cause. This excerpt from Chapter 1 of The 19 Deadly Sins of Software Security takes a look at how you can improve...  Continue Reading

• Network footprinting

  This excerpt from Chapter 2 of "Protect Your Windows Network from Perimeter to Data," by Jesper Johansson and Steve Riley, is about.securing networks by understanding how hackers take advantage of your mistakes.  Continue Reading

• How to get an attacker out of your network

  This excerpt from Chapter 2 of "Protect Your Windows Network from Perimeter to Data," by Jesper Johansson and Steve Riley, is about.securing networks by understanding how hackers take advantage of your mistakes.  Continue Reading

• Target network

  This excerpt from Chapter 2 of "Protect Your Windows Network from Perimeter to Data," by Jesper Johansson and Steve Riley, is about.securing networks by understanding how hackers take advantage of your mistakes.  Continue Reading

• Initial compromise

  This excerpt from Chapter 2 of "Protect Your Windows Network from Perimeter to Data," by Jesper Johansson and Steve Riley, is about.securing networks by understanding how hackers take advantage of your mistakes.  Continue Reading

• Elevating privileges

  This excerpt from Chapter 2 of "Protect Your Windows Network from Perimeter to Data," by Jesper Johansson and Steve Riley, is about.securing networks by understanding how hackers take advantage of your mistakes.  Continue Reading

• Taking over the domain

  This excerpt from Chapter 2 of "Protect Your Windows Network from Perimeter to Data," by Jesper Johansson and Steve Riley, is about.securing networks by understanding how hackers take advantage of your mistakes.  Continue Reading

• Rooting out a rootkit: Stage two -- Immediate actions

  What steps should you take immediately after you discover a rootkit? Read what the experts have to say.  Continue Reading

• Rooting out a rootkit: Stage one -- Diagnosis

  Antivirus software has been mysteriously disabled, some users get the blue screen of death and others have experienced unexplained restarts or error messages. Find out if these problems are caused by a rootkit.  Continue Reading

• Rooting out a rootkit: Stage three -- Recovery

  What should you do to start getting Windows on the road to recovery and normal operation? Read what the experts have to say.  Continue Reading

• Hardcore Windows XP: The Step-by-Step Guide to Ultimate Performance: Chapter 4, Working Remotely

  Take control of Windows XP and get the most out of everything this powerful operating system has to offer. Written by Microsoft Windows XP Expert Zone columnist Joli Ballew, this book shows you hundreds of tips and tricks you'll be able to use right...  Continue Reading

• Windows security toolbox: Our experts' favorite freeware

  Each of our Windows security experts shares his top five freeware tools.  Continue Reading

• Checklists: Harden access control settings

  In this collection of Roberta Bragg checklists, you'll get step-by-step advice on how to lock down Windows access control settings.  Continue Reading

• Clean up spyware-infected PCs: Stage four -- Preventative measures

  Once you have the spyware problem under control, what steps can you take to avoid being infected in the future?  Continue Reading

• Training, training and more training

  Training should never be overlooked in securing Windows systems. Contributor Tony Bradley offers his insights.  Continue Reading

• Restrict outbound SMTP traffic

  Contributor Tony Bradley explains how to protect your Windows systems from rogue mail servers spreading viruses.  Continue Reading

• Mark Minasi's cram session on XP SP2 and Windows Server 2003 SP1

  Mark Minasi dissects Windows XP SP2 and Windows Server 2003 SP1 in five, 15-minute webcast cram sessions. You can even download a worksheet to follow along with the lesson you're hearing. Find out the good and bad about XP SP2 and Windows 2003 SP1 ...  Continue Reading

• Google queries for manual hacking tests

  If you want to perform your own manual Google queries, here are some basic tips to get you started  Continue Reading

• Google tools for automated hacking tests

  A variety of tools are available to automate and enhance your Google hacking tests. Get a list of resources in this tip.  Continue Reading

• Four steps to safeguard Windows data from Google hackers

  Putting countermeasures in place can help you keep sensitive information away from Google and out of the reach of Google "hackers". Here are four critical steps to follow.  Continue Reading

• SearchWindowsSecurity.com's Hardening Windows School

  In SearchWindowsSecurity.com's Hardening Windows School, IT professionals will learn the best methods for hardening Windows-platformed machines against unknown security threats.  Continue Reading

• Ways to implement safe scripting

  Find out ways to implement safe scripting in this excerpt from Chapter 28 of Don Jones' "Managing Windows with VBScript and WMI."  Continue Reading

• Digitally signing scripts

  Find out more about digitally signing scripts in this excerpt from Chapter 28 of Don Jones' "Managing Windows with VBScript and WMI."  Continue Reading

• Managing Windows with VBScript and WMI: Chapter 28, 'Scripting Security'

  Chapter 28 of Don Jones' Managing Windows with VBScript and WMI describes how to make scripting a safe part of your environment.  Continue Reading

• Why scripting can be dangerous

  Find out why scripting can be dangerous in this excerpt from Chapter 28 of Don Jones' "Managing Windows with VBScript and WMI."  Continue Reading

• Running only signed scripts

  Find out how to run only signed scripts in this excerpt from Chapter 28 of Don Jones' "Managing Windows with VBScript and WMI."  Continue Reading

• Exam Cram Quiz #2 Answer Key

  Check your answers to the 10 Exam Cram prep questions from the MCSA/MCSE Exam Cram 2 chapter "Maintaining Security by Implementing, Managing, and Troubleshooting Service Packs and Security Updates."  Continue Reading

• Use IPSec Policies

  This excerpt from Chapter 11 of Roberta Bragg's "Hardening Windows Systems" describes how to use IPSec policies to provide encryption of communications between two computers, and manage and prevent connections.  Continue Reading

• Protect WAN communications

  Find out how to protect WAN communications in this excerpt from Chapter 11 of Roberta Bragg's "Hardening Windows Systems."  Continue Reading

• Checklist: Lock down Joe User's administrator rights

  If you firmly believe users need to be given administrator rights, it's critical that you limit what they can do. Prevent users from abusing their powers with this checklist.  Continue Reading

• Introduction to patch management

  This is introduction to patch management is the first excerpt from Chapter 1 of "The complete patch management book," courtesy of Ecora.  Continue Reading

• Checklist: Top four Windows services to disable -- maybe

  The decision to disable some services often depends on whether or not your security needs outweigh your business needs. This checklist identifies four services to disable -- maybe.  Continue Reading

• Checklist: Set account options to limit systems access

  Granting access to Windows systems is a privilege -- not a right. Limit access wherever possible by hardening account options, starting with the settings in this checklist.  Continue Reading

• Additonal reasons why patching is important

  This excerpt from "The administrator shortcut guide to patch management" explains the cost of having poor security and the benefits of fitting patching into your overall security.  Continue Reading

• Checklist: Windows services you should disable today

  Many Windows services running by default are exposing your systems to attack. Which ones should be turned off immediately? Find out in this checklist by site expert Roberta Bragg.  Continue Reading

• Checklist: Key control settings to harden password authentication

  In part two of her password hardening series, Roberta Bragg details configuration changes to make in Windows Server 2003, 2000 and legacy systems to harden password authentication.  Continue Reading

• Strengthen the password policy

  This excerpt from Chapter 1 of Roberta Bragg's "Hardening Windows systems" explains why and how to create a strong password policy.  Continue Reading

• Hardening user passwords checklist

  Roberta Bragg offers her password hardening best practices in this introductory checklist.  Continue Reading