L

L0phtCrack, Testing Tools

LANs, Step 4: Design a Secure Architecture (see , )

LC4, Testing Tools

LDAP (Lightweight Directory Access Protocol), Windows Integrated Security

least privilege, principle of, Role-Based Authorization, SQL-Injection Attacks, Fundamental Lockdown Principles

Lightweight Directory Access Protocol (LDAP), Windows Integrated Security

Link, Testing Tools

LinkDemand, It’s On By Default

Linux vulnerabilities, The Arms Race of Hacking

Local Intranet zone, Security Zones and Trust Levels, Security Zones and Permissions, Security Zones and Permissions, Security Zones and Permissions, Local Intranet, Internet, and Trusted Sites Zones, Ensuring That Your Code Will Run Safely

defined, Security Zones and Trust Levels

isolated storage support, Ensuring That Your Code Will Run Safely

luring attacks, Security Zones and Permissions

permissions for, Security Zones and Permissions, Security Zones and Permissions

scope of, Local Intranet, Internet, and Trusted Sites Zones

locking down, Locking Down Windows, Internet Information Services, and .NET, Locking Down Windows, Internet Information Services, and .NET, Locking Down Windows, Internet Information Services, and .NET, "I’m Already Protected. I’m Using a Firewall.", "I’m Already Protected. I’m Using a Firewall.", "I’m Already Protected. I’m Using a Firewall.", "I’m Already Protected. I’m Using a Firewall.", "I’m Already Protected. I’m Using a Firewall.", Fundamental Lockdown Principles, Fundamental Lockdown Principles, Fundamental Lockdown Principles, Fundamental Lockdown Principles, Fundamental Lockdown Principles, Fundamental Lockdown Principles, Fundamental Lockdown Principles, Fundamental Lockdown Principles, Fundamental Lockdown Principles, Fundamental Lockdown Principles, Fundamental Lockdown Principles, Automated Tools, Automated Tools, Automated Tools, Automated Tools, Automated Tools, Automated Tools, Automated Tools, Enable Auditing, Enable Auditing, Enable Auditing, Turn Off Unnecessary Sharing, Turn Off Unnecessary Sharing, Implement BIOS Password Protection, Implement BIOS Password Protection, Implement BIOS Password Protection, Implement BIOS Password Protection, Implement BIOS Password Protection, Disable and Delete Unnecessary Accounts, Disable and Delete Unnecessary Accounts, Remove Samples, Remove Samples, Locking Down .NET, Securing Databases, Locking Down Microsoft Access, Locking Down Microsoft Access

.NET Framework, Remove Samples

accounts, Implement BIOS Password Protection

antivirus software, Fundamental Lockdown Principles

auditing, enabling, Enable Auditing

auto logon, Automated Tools

automated tools for, Fundamental Lockdown Principles

back doors, closing, Fundamental Lockdown Principles

backing up data, Fundamental Lockdown Principles

BIOS passwords, Turn Off Unnecessary Sharing

clients, Automated Tools

databases, Securing Databases

defined, Locking Down Windows, Internet Information Services, and .NET

domain controllers, Implement BIOS Password Protection

encrypting folders, Automated Tools

file-sharing software, Turn Off Unnecessary Sharing

firewalls for, Locking Down Windows, Internet Information Services, and .NET, Disable and Delete Unnecessary Accounts

floppy drives, booting from, Implement BIOS Password Protection

fundamental principles of, "I’m Already Protected. I’m Using a Firewall."

IIS, Fundamental Lockdown Principles, Disable and Delete Unnecessary Accounts

least privilege principle, Fundamental Lockdown Principles

maintenance, Fundamental Lockdown Principles

MBSA, Automated Tools (see )

Microsoft Access, Locking Down Microsoft Access

NTFS file system, "I’m Already Protected. I’m Using a Firewall.", Automated Tools

patches, OS security, Fundamental Lockdown Principles

physical security, "I’m Already Protected. I’m Using a Firewall."

purpose of, Locking Down Windows, Internet Information Services, and .NET

real-world considerations, Locking Down .NET

servers, Implement BIOS Password Protection

service packs, Fundamental Lockdown Principles

sharing, Enable Auditing

SQL Server, Locking Down Microsoft Access

strong user passwords, Fundamental Lockdown Principles

tools for, Fundamental Lockdown Principles

turning off services, Enable Auditing

URLScan, Automated Tools, Remove Samples

Windows 9x, "I’m Already Protected. I’m Using a Firewall."

Windows clients, Automated Tools

Windows NT, "I’m Already Protected. I’m Using a Firewall."

Windows servers, Implement BIOS Password Protection

logging, Exception Handling, Exception Handling, Global Exception Handlers, Global Exception Handlers, Automated Unit Testing, Remove Samples, Locking Down SQL Server, Step 10: Design for Maintenance, Early Detection, Detecting That an Attack Has Taken Place or Is in Progress, Determining Whether to Trust Your Detection Mechanisms, Logging Exceptions

attacks altering logs, Determining Whether to Trust Your Detection Mechanisms

automated unit testing, Automated Unit Testing

detecting attacks, Early Detection, Detecting That an Attack Has Taken Place or Is in Progress

encryption exceptions, Logging Exceptions

exceptions handled, Exception Handling, Exception Handling, Global Exception Handlers

IIS, enabling, Remove Samples

monitoring logs, Step 10: Design for Maintenance

SQL Server, Locking Down SQL Server

viewing remotely, Global Exception Handlers

logging out, Forms Authentication

logons, Role-Based Authorization, Role-Based Authorization Exercise, EmployeeManagementWeb Practice Files, Forms Authentication, SQL-Injection Attacks, When HTML Script Injection Becomes a Problem, Automated Tools, SQL Server Authentication, Microsoft Access Authentication and Authorization, Step 5: Threat-Model the Vulnerabilities, Employee Management System, Employee Management Web

auto logon, disabling, Automated Tools

eliminating repetition, Role-Based Authorization Exercise

Forms authentication, EmployeeManagementWeb Practice Files, Forms Authentication

frmLogin sample, Employee Management System

HTML scripting attacks using, When HTML Script Injection Becomes a Problem

login.aspx sample, Employee Management Web

passwords, Microsoft Access Authentication and Authorization (see )

recommendation, Step 5: Threat-Model the Vulnerabilities

SQL-injection attacks using, SQL-Injection Attacks

users, Role-Based Authorization (see )

Windows Authentication, setting up, SQL Server Authentication

LSADump2, Testing Tools

luring attacks, Code-Access Security, Security Zones and Permissions