Professional Windows Desktop and Server Hardening (Programmer to Programmer)
|
Description
Although not well known, Microsoft Windows has the best security of any popular operating system in the world today. What Windows has is poor default security. There are specific steps any professional can take to significantly increase the security of Microsoft Windows. Unfortunately, most books and the news media keep reinforcing the failed, traditional recommendations of firewalls, antivirus scanners, and end user education. Those defenses have failed and will always fail. The reason why the traditional advice fails is that most defenses and courses concentrate on defending PCs against the motivated hacker, when 990f the attacks (and 1000f the popular attacks) are caused by malicious viruses, worms, and trojans. Defending against these mobile threats calls for specific tasks that when implemented, defeat most threats, no matter the brand of firewall or virus scanner you've purchased. Better, yet, most of the good defenses are free, included with Windows (just not implemented correctly). Based on this premise, the book is organized as:
Part I-The first chapter will educate readers about the real threat to their computer systems-roving malware not dedicated human attackers. This lesson is central to the book's method of defense
Part II-The second part of the book (Chapters 3 and 4) will discuss using NTFS permissions to make the ultimate defense
Part III-Windows Operating System Hardening
Part IV-Application Security
Part V-Automating Security-this is perhaps the second most valuable part of the book, discussed no where else in the world (other than private Microsoft security teams who I taught my methods to) |
|
