book

Windows Vista Security For Dummies®

Name: Windows Vista Security For Dummies®
Author: Brian Koerner
ISBN: 9780470118054

by Brian Koerner

November 2007

Beginner

384 pages

8h 31m

English

Wiley

Read now

Unlock full access

Copyright
About the Author
Dedication
Author's Acknowledgments
Introduction
About This BookConventions Used in This BookWhat You're Not to ReadFoolish AssumptionsHow This Book Is OrganizedPart I: Vista Security EssentialsPart II: Controlling Access to Systems and DataPart III: Preserving and Protecting DataPart IV: Guarding against Threats to Network SecurityPart VI: The Part of TensIcons Used in This BookWhere to Go from Here
I. Vista Security Essentials
1. Getting Up to Speed on Vista Security
Seeing What's New in Vista SecurityThe Vista User Account ControlWindows DefenderParental ControlsWireless security enhancementsService hardeningInternet Explorer 7Encryption with EFS and BitLockerWindows Security Center enhancementsWindows Firewall enhancementsKnowing What to SecureHardware and softwarePersonally Identifiable Information (PII)Sensitive information from workOther information that can be used adverselyFilling Up Your Security ToolboxUnderstanding your requirementsArming yourself with technical toolsIntegrating Common Sense and Security
2. Setting Up Your Security Plan
Understanding the RiskAssessing Your Systems' Security RisksUnderstand your systemIdentify threatsIdentify system vulnerabilityIdentify what you have in place (Or can put in place)Assess the chance of a security breachKnow the true effectDetermine the riskTaking action to reduce riskUnderstanding Your SystemHardware and softwareInterfacesSystem usage and what type of information is on itIdentifying ThreatsVulnerability IdentificationWhat Safeguards Do You Currently Have in Place?Telling the Future: What Are the Chances of That Happening?Understanding the Real ImpactDetermining the RiskEstablishing Your Security PlanTaking action to reduce the risksA little about how users introduce security risks
3. Dispensing Security from Windows Security Center
Windows Security Center EssentialsManaging Firewall SettingsMonitoring, alerting, and remediationUsing WSC Options menu to manage FirewallConfiguring Automatic UpdatingMonitoring, alerting, and remediationManaging Automatic UpdatingWSC Malware ProtectionMonitoring, alerting, and remediationVirus Protection optionsWindows Defender optionsAccessing Other Security Options with WSCInternet Security SettingsUser Account ControlOther things to knowGet the latest security and virus information from MicrosoftChanging how WSC alerts you
II. Controlling Access to Systems and Data

4. Administering User Account Control
Understanding Life As a Standard UserKnowing what you can't doAdmin Approval mode: When Standard User mode isn't enoughOver‐the‐Shoulder CredentialsEvaluating a user's need for accessManaging UAC with Local Security Policy SettingsAdmin Approval Mode for Built‐in AdministratorsBehavior of the Elevation Prompt for Administrators in Admin Approval ModeBehavior of the Elevation Prompt for Standard UsersDetect Application Installations and Prompt for ElevationOnly Elevate Executables That Are Signed and ValidatedOnly Elevate UIAccess Applications That Are Installed in Secure LocationsRun All Administrators in Admin Approval ModeSwitch to the Secure Desktop When Prompting for ElevationVirtualize File and Registry Write Failures to Per‐User Locations
5. Protecting Your Data with Rights Management Service
What Is RMS?Why you might need to use RMSHow RMS client integrates your machineRMS management featuresMicrosoft Office Information Rights Management (IRM) CapabilitiesIRM and OutlookIRM and documentsRights Management add‐on for Internet ExplorerDigital Rights Management (DRM) versus RMSDrawbacks to RMS
6. Managing Accounts, Groups, and Shares
The Vista Identity ModelManaging Accounts and Groups within VistaVista Built‐in Accounts and GroupsAdministratorAdministratorsANONYMOUS LOGONAuthenticated UsersBackup OperatorsBATCHEvent Log ReadersEveryoneGuestIIS_IUSRSINTERACTIVEIUSRLOCAL SERVICENETWORKNetwork Configuration OperatorsNETWORK SERVICEPerformance Log UsersPerformance Monitor UsersSERVICESYSTEMUsersCreating and Disabling User AccountsCreating a user account and passwordDisabling/re‐enabling a user accountUsing the Select Objects InterfaceCreating Groups and Assigning UsersThe Vista Access Control ModelSystem security settingsObject‐level securityAllowing Access to Data through SharingFile sharingUsing a wizard to manage file sharingPublic folder sharingPassword‐protected sharingFile or printer sharing and firewalls
7. Advanced Techniques for Managing Access
Managing Object‐Level SecurityEffective permissionsInherited versus explicit securityProtecting the File System through NTFS PermissionsUnderstanding How to Lock Down the RegistryUsing Regedit to view and modify the registryRegistry keys to pay attention toKeeping an Eye on Your SystemAuditing and logging policiesDefining object auditingNTFS object auditingRegistry object auditingService object auditing
III. Preserving and Protecting Data
8. Backing Up So You Can Always Restore
Why Should I Back Up My Data?Choosing Your Vista Backup OptionsVista system restore pointBacking up files and foldersCompletePC BackupShadow CopySupported devicesIdentifying Your RequirementsPutting Your Requirements to PaperPlanning Your Backup and Recovery StrategyPreserving Your SystemCreating a restore pointRestoring your system to a previous system stateOrganizing Your Data So It's Easy to Back UpBacking Up with Backup and RestoreBacking up files with the Backup Files WizardRestoring files and foldersBacking Up with CompletePC BackupRestoring a CompletePC BackupA little about shadow copying
9. Planning and Implementing Encrypting File System
Encryption 101Symmetric encryptionAsymmetric encryptionProtecting Your Files and Folders with EFSHow Encrypting File System worksEncrypting foldersEncrypting a specific fileSharing encrypted filesData recoveryRecovering filesRecovering foldersDeveloping a file and folder encryption strategyUser educationUnderstanding what files to encryptOrganizing your dataBacking up your encryption keysA word about roaming profiles
10. Avoiding Data Theft with BitLocker
Keeping Data Safe with BitLockerBitLocker RequirementsPreparing Your System for BitLockerPreparing a disk with no installed OSPreparing a disk with an operating system installed on itSetting Up BitLockerEnabling BitLocker with basic optionsEnabling BitLocker with advanced optionsEnabling BitLocker on a system without a TPM chipAdding additional authentication with TPM plus a PIN or a TPM startup keyConfiguring TPM plus PINConfiguring TPM with startup keyConfiguring Additional SecurityEncryption methodsPrevent memory overwriteRecovering BitLocker‐protected dataRecovery folder optionsConfiguring recovery optionsPerforming a recoveryTurning Off BitLockerKnowing What BitLocker Can't Protect
IV. Guarding against Threats to Network Security
11. Configuring Your Firewall
Using the Windows Firewall AppletGeneral tabExceptions tabAdvanced tabUsing Windows Firewall with Advanced Security AppletUsing the Getting Started Section to configure FirewallThe Authenticate Communications between Computers sectionThe View and Create Firewall Rules sectionThe Monitoring sectionUsing the Resources paneWhat Do I Do Now?Other Firewalls
12. Locking Down Wireless
Wireless Network Basic TrainingWhat's New for Wireless Security in VistaConfiguring Wireless Security in VistaConnecting to a networkA few words about unsecure networksAccessing wireless hotspots or other unsecure wireless networksRestricting use to specific wireless networksNetwork and Sharing CenterModifying your network connectionConfiguring static IP addressesSetting up an ad hoc (peer‐to‐peer) wireless networkSecuring Your Wireless Router or Access PointChange your administrative username and passwordChange your service set identifier (SSID)Enabling secure communicationConsider disabling DHCPMAC address filteringDisabling SSID broadcastsKnow your network's range and limit it if needed
13. Implementing IE7 Security Features to Limit Your Exposure
Configuring IE7 Internet Protected Mode OptionsWorking Safely with ActiveXProtecting against Cross‐Domain Scripting AttacksConfiguring Phishing FiltersSetting Binary Behavior RestrictionsUnderstanding Local Machine Zone RestrictionsAdding more security with MIME safety and MK protocol restriction settingsLocking down network protocols to prevent exposuresControlling object cachingControlling automatic downloads and scriptsBringing It All Together
14. Avoiding Invasion (By Malware, Spyware, Viruses, and the Other Usual Suspects)
The 411 on Unsanctioned SoftwareReducing Spyware, Malware, and More with Windows DefenderWhat's NewDefending Your SystemGetting to know the Windows Defender interfaceUpdating Windows Defender definition filesReal‐time protectionInvoking on‐demand scansQuick scanFull scanCustom scanResponding to threatsAutomatically scan my computer (scheduled scan)Knowing what alerts really meanSetting your threat levelsPutting Defender's tools to workQuarantined itemsUsing Allowed ItemsSoftware ExplorerWindows Defender Web siteLending a helping hand in classifying spywareOther ways to protect against spyware, viruses, and other malicious softwareImplementing user best practicesThird‐party software
V. Establishing Advanced Security Practices
15. Restricting the Use of Removable Media (And More)
Removable Media and Associated Security RisksRisks of attaching mediaRisks of detaching mediaProtecting Yourself Against the Risks of Removable MediaProtecting against viruses and malwareProtection against removal of data from your machineProtection of data on removable devicesUsing Device Control to Protect Data on the MoveImplementing Device Control installation settingsImplementing Device Control usage settingsControlling device installationControlling device usage
16. Working with Vista Security Policies
Implementing the Right Security Settings for YouWhy you should use policy to manage security settingsManaging policy with the Group Policy Object EditorProtecting Your System with Local Security Policy SettingsPassword policiesAccount‐lockout policiesAudit policiesUser rights assignmentSecurity optionsEvent logDiving Deeper into Security Policy SettingsComputer configuration policy settingsUser‐configuration policy settingsAdministrative templatesManaging Policy by Using Security TemplatesCreating your own custom security templateWindows Vista Security Guide templatesApplying a security template to your machine
VI. The Part of Tens
17. Nine Security Risks and How to Thwart Them
Always Being ConnectedTaking Shortcuts with SecurityFailing to Apply Software PatchesUnwillingly Participating in AttacksGetting Careless with E‐Mail SecurityMobile CodePeer‐to‐Peer NetworkingUnsafe Instant MessagingMobile Device Security
18. Ten Additional Security Tools and Resources You Shouldn't Compute Without
Antivirus SoftwareSpyware Removal ToolsThird‐Party Backup SoftwareFirewalls and other Network ProtectionOnline Security NewslettersThe About.com Identity‐Theft Web SiteMicrosoft Security Baseline AnalyzerVista Security Sidebar GadgetsSystinternals ToolsSecure File‐Deletion Software
A. Glossary
B. Getting to Know Vista Versions (And Related Security Features)
Vista Home BasicVista Home PremiumVista BusinessVista UltimateVista EnterpriseComparing Versions of Vista

Overview

* Ninety percent of the world's PCs run Windows, making Vista a prime target for malicious hackers
* Helps readers get the most out of new Vista security features by detailing the vulnerabilities that have already been found in Vista and explains how to combat potential problems
* Identifies possible threats brought on by the millions of lines of brand-new code in the operating system and risky new features, including IPv6 and peer-to-peer support
* Covers the Windows Security Center, rights management, BitLocker, Web security, and much more

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

WINDOWS VISTA™ SECURITY: Securing Vista Against Malicious Attacks

Publisher Resources

ISBN: 9780470118054Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills