WindowSecurity.com Articles & Tutorials Archive

Articles & Tutorials by date (Click here to sort Articles & Tutorials by topic)

2008
[	8	]	January, 2008	[	6	]	February, 2008	[	6	]	March, 2008
[	11	]	April, 2008	[	1	]	May, 2008
2007
[	10	]	January, 2007	[	9	]	February, 2007	[	8	]	March, 2007
[	6	]	April, 2007	[	8	]	May, 2007	[	6	]	June, 2007
[	7	]	July, 2007	[	11	]	August, 2007	[	7	]	September, 2007
[	12	]	October, 2007	[	11	]	November, 2007	[	7	]	December, 2007
2006
[	13	]	January, 2006	[	9	]	February, 2006	[	11	]	March, 2006
[	9	]	April, 2006	[	12	]	May, 2006	[	10	]	June, 2006
[	9	]	July, 2006	[	11	]	August, 2006	[	9	]	September, 2006
[	10	]	October, 2006	[	11	]	November, 2006	[	9	]	December, 2006
2005
[	9	]	January, 2005	[	11	]	February, 2005	[	12	]	March, 2005
[	12	]	April, 2005	[	11	]	May, 2005	[	14	]	June, 2005
[	12	]	July, 2005	[	14	]	August, 2005	[	10	]	September, 2005
[	10	]	October, 2005	[	8	]	November, 2005	[	9	]	December, 2005
2004
[	4	]	January, 2004	[	3	]	February, 2004	[	5	]	March, 2004
[	3	]	April, 2004	[	6	]	May, 2004	[	9	]	June, 2004
[	9	]	July, 2004	[	8	]	August, 2004	[	8	]	September, 2004
[	7	]	October, 2004	[	9	]	November, 2004	[	9	]	December, 2004
2003
[	6	]	January, 2003	[	5	]	February, 2003	[	10	]	March, 2003
[	8	]	April, 2003	[	15	]	May, 2003	[	8	]	June, 2003
[	11	]	July, 2003	[	5	]	August, 2003	[	6	]	September, 2003
[	13	]	October, 2003	[	5	]	November, 2003	[	4	]	December, 2003
2002
[	1	]	March, 2002	[	9	]	April, 2002	[	7	]	June, 2002
[	29	]	July, 2002	[	7	]	August, 2002	[	4	]	September, 2002
[	537	]	October, 2002	[	10	]	November, 2002	[	8	]	December, 2002
2001
[	6	]	February, 2001	[	1	]	May, 2001	[	1	]	October, 2001
2000
[	129	]	February, 2000	[	188	]	April, 2000	[	5	]	September, 2000
[	2	]	December, 2000

Articles & Tutorials for January, 2005

How to Avoid Phishing Scams: Date - Jan 27, 2005; Author - Brien Posey; Section - Articles / Content Security (Email & FTP); If you received an E-mail message from your bank saying that your checking account was overdrawn because of a check that you didn’t write, what would you do? Before you answer, it’s important to realize that you may not really be overdrawn and that there is a good chance that someone is trying to scam you. In this article, I will explain exactly how this type of scam works and how to avoid being a victim.
How To: Mastering PortQry.exe (Part 1): Date - Jan 25, 2005; Author - Robert J. Shimonski; Section - Articles / Misc Network Security; In this article we will cover the fundamentals of using the PortQry command line tool. PortQry.exe is a utility that you can use to help you troubleshoot TCP/IP connections. The PortQry.exe utility runs on Windows 2000-based computers, on Windows XP-based computers, and on Windows Server 2003-based computers.
Security Configuration Wizard in Windows Server 2003 Service Pack 1: Date - Jan 20, 2005; Author - Derek Melber; Section - Articles / Windows 2003 Security; Microsoft has developed an almost ideal tool to help you configure security on computers in your organization. The tool is the Security Configuration Wizard, which is available in Windows Server 2003 service pack 1. The tool can help you configure services, network security, auditing, registry settings, and more. The wizard accomplishes these goals by producing security policies, which can be used in conjunction with security templates and specific server roles
The Convergence of Hacking and Security Tools: Date - Jan 18, 2005; Author - Don Parker; Section - Articles / Misc Network Security; There is beginning to be a blurring of the lines when it comes to security tools, and hacking tools. Is there really a difference anymore between the two of them at all? This article will detail one specific example of this paradigm "Metasploit Framework". Following this article will be a clear demonstration of this tool in action as well over the course of a three part series.
Use Microsoft's Virtual PC to Test Software Before Deploying It: Date - Jan 13, 2005; Author - Deb Shinder; Section - Articles / Misc Network Security; The introduction of new operating systems, new applications and even patches or fixes on your production network can pose its own kind of threat, if you don't know what the "unintended consequences" will be. Best practice is to first set up a test environment that emulates your production environment and run the new software there. Buying a lot of machines to do this can be prohibitively expensive, so many network administrators have turned to virtual machine software. In this article, we take a look at what's different in VPC and how to install and use it.
Security Series: Disaster Recovery Tactics that Ensure Business Continuity (Part 1 of 6): Date - Jan 11, 2005; Author - Ricky M. Magalhaes; Section - Articles / Misc Network Security; In part one of the Disaster Recovery series potential disasters, possible events and the reason that it is vital to have a disaster recovery plan and Business continuity plan in place like an insurance policy on any valuable items are covered.
Passwords - Common Attacks and Possible Solutions: Date - Jan 07, 2005; Author - Dancho Danchev; Section - Articles / Authentication, Access Control & Encryption; Making sure authorized users have access to either sensitive company information or their personal e-mail can be a dauntning task, given the fact that an average user has to remember at least 4/5 passwords, a couple of which have to be changed on a monthly basis. The majority of users are frustrated when choosing or remembering a password, and are highly unaware of the consequences of their actions while handling accounting data. This article will provide you with an overview of how important, yet fragile, passwords security really is; you will be acquainted with different techniques for creating and maintaining passwords, and possible alternative methods for authentication, namely Passphrases, Biometrics and Public Key Infrastructure(PKI).
Making the Internet Safer For Your Employees: Date - Jan 06, 2005; Author - Brien Posey; Section - Articles / Misc Network Security; The Internet is becoming such a hostile environment that some companies are starting to deny employees Web browsing and E-mail privileges in the interest of keeping the network safe. Rather than taking such extreme action though, there are other steps that you can take to help insure that those users connected to the Internet don’t infect your network with spyware, viruses, or other parasites. In this article, I will explain some of these techniques to you.
How to Plan for a Possible Network Attack: Date - Jan 05, 2005; Author - Robert J. Shimonski; Section - Articles / Misc Network Security; In this article we will focus on a much needed topic which is proactive planning. Planning for your systems and network devices to get hit so that you can avert it if it does. A saying pops into my head – "lack of prior planning on your part does not constitute an emergency on mine." This simply means that if you failed to plan, you planned to fail. In this article we will cover the basics you need to know about properly assessing your chances for attack and ways to proactively plan for attack.