| In this book, two senior members of Microsoft's Security and Business Technology Unit present a complete "Defense in Depth" model for protecting any Windows networkno matter how large or complex. Drawing on their work with hundreds of enterprise customers, they systematically address all three elements of a successful security program: people, processes, and technology.Unlike security books that focus on individual attacks and countermeasures, this book shows how to address the problem holistically, in its entirety. Through hands-on examples and practical case studies, you'll learn how to integrate multiple defensesdeterring attacks, delaying them, and increasing the cost to the attacker. Coverage includes Improving security from the top of the network stack to the bottom Understanding what you need to do right away, and what can wait Avoiding "pseudo-solutions" that offer a false sense of security Developing effective security policiesand educating those pesky users Beefing up your first line of defense: physical and perimeter security Modeling threats and identifying security dependencies Preventing rogue access from inside the network Systematically hardening Windows servers and clients Protecting client applications, server applications, and web services Detecting intrusions and mitigating the effects of successful attacks Addressing the unique challenges of small business network securityAuthoritative and thorough, Protect Your Windows Network will be the standard Microsoft security guide for sysadmins, netadmins, security professionals, architects, and technical decision-makers alike. |
