The TechNet Australia Blog : Security

Monthly Security Bulletin Webcast - November 2009

Deeps — Mon, 16 Nov 2009 01:41:08 GMT

The Microsoft Security Response Center (MSRC) holds a monthly webcast to discuss the security bulletins that we released on the second Tuesday of that month. To attend live and ask questions, register at http://www.microsoft.com/technet/security.

In this edition, Jerry Bryant and Adrian Stone present information about the November 2009 Security Bulletins and answer customer questions live. See the MSRC blog for a transcript of the questions and answers that were addressed during the live session: http://blogs.technet.com/msrc

For more information about the MSRC, please visit:
http://www.microsoft.com/security/msrc/default.mspx

Make sure you subscribe to the Microsoft Security newsletter if you already haven't done so.

Microsoft Security Intelligence Report (SIR) v7

Deeps — Wed, 04 Nov 2009 22:46:39 GMT

The Microsoft Security Intelligence Report (SIR) is a comprehensive and wide-ranging study of the evolving threat landscape, and addresses such topics as software vulnerability disclosures and exploits, malicious software (malware), and potentially unwanted software.

Volume 7 of the Security Intelligence Report (SIR v7) covers the first half of 2009 (January through June). It includes data derived from more than 450 million computers worldwide, each running Windows. It also draws data from some of the busiest services on the Internet, such as Windows Live Hotmail and Bing.

The research is extensive and we encourage you to download the report.

October 2009 Security Bulletin Overview

Deeps — Wed, 14 Oct 2009 05:39:48 GMT

This is a basic overview of the security bulletins released by the Microsoft Security Response Center (MSRC) in October 2009. For bulletin details, please visit:
http://www.microsoft.com/technet/security
or
http://www.microsoft.com/security
Other resources mentioned in the video:
Microsoft Update: http://update.microsoft.com

Video on how to install updates on Vista >>
This video is brought to you by the Trustworthy Computing security response communications team.

Dine with Steve Riley in Sydney

Deeps — Wed, 13 Feb 2008 07:13:58 GMT

For those who dont know, Steve Riley will be touring Australia during the upcoming Heroes Happen 2008 events. For those who dont know who Steve is please see below:

"Steve is a senior security strategist in Microsoft's Trustworthy Computing Group. He is a frequent and popular speaker at conferences worldwide, often appearing in Asia one week and Europe the next: speaking engagements have included multiple Microsoft TechEds and other conferences, plus SANS, RSA, Black Hat, Windows and Exchange Connections, Windows IT Pro Magazine roadshows, TechMentor conferences, the Institute for Applied Network Security, and InfoSec US. When not evangelizing the benefits of Microsoft security technology, Steve spends time with customers to better understand the security pain they face and show how some of that pain can be eliminated."

Steve will be doing the Locknote session at the Sydney event on February 28th which I will be hosting. We will be asking Steve a whole lot of Security related questions and you have the opportunity to get your question in! Send us your Security related questions to itproanz@microsoft.com. The top 5 questions that we pick will be asked in the session plus you will be dining with Steve on the night of February 28th. You will need to live in Sydney unless you are flying in for the event.

Send us your questions today!

Windows Vista One Year Vulnerability Report

Deeps — Thu, 24 Jan 2008 05:54:25 GMT

Jeff Jones has released the 1 year vulnerability report for Windows Vista.

This paper analyzes the vulnerability disclosures and security updates for the first year of Windows Vista and looks at it in the context of its predecessor, Windows XP, along with other modern workstation operating systems Red Hat, Ubuntu and Apple products.

The results of the analysis show that Windows Vista has an improved security vulnerability profile over its predecessor. Analysis of security updates also shows that Microsoft improvements to the security update process and development process have reduced the impact of security updates to Windows administrators significantly compared to its predecessor, Windows XP.

Download the report

Security Track at the heroes happen 2008 roadshow

Deeps — Thu, 17 Jan 2008 04:18:58 GMT

We have the Heroes Happen 2008 roadshow touring around the country soon. The roadshow will have technical training on Windows Server 2008, SQL Server 2008 and Visual Studio 2008. In addition to this we will also have a dedicated track for Security Professionals. The sessions for the Security track are:

Building a Secure Base Platform for your business with Windows Server 2008
Threat mitigation: being at the Forefront
Building a managed platform with Microsoft System Center
Bringing down the house of cards: enforcing secure applications on a secure infrastructure
Data protection: enabling the enterprise mobility vision with Rights management

Also available for download is the Windows Server 2008 Security Guide.

How Does the Windows Server 2008 Security Guide Help Secure Your Business?
Based on extensive, real-world experience from customers, government agencies, and Microsoft security experts, the Windows Server 2008 Security Guide describes how to structure your environment correctly and prescribes security settings that are appropriate for most enterprise environments. The guide also prescribes more restrictive settings that are appropriate for more "locked down" environments, where concern for security is so great that a significant loss of functionality is acceptable.

Both security setting configurations have been thoroughly tested in Microsoft labs, and validated by customers and partners under real-world conditions. You also can easily tailor the configuration you choose by modifying any of the security settings to accommodate the unique needs of your organization.

Deploy Your Security Baseline Quickly and Reliably
The powerful GPOAccelerator tool is included with the guidance to enable you to automatically deploy a tested configuration of Group Policy security settings across your organization — in minutes, instead of hours or days.

The tool creates all of the Group Policy objects (GPOs) you need to deploy the security configuration you choose. The tool also eliminates many manual steps in the deployment process to give you faster and more reliable results.

With more than 200 security and privacy setting options, you can fine-tune your deployment of Windows Server 2008, balancing your organization’s needs for security and functionality.

Harden Your Server Workloads
This security guide also includes detailed guidance on how to harden Windows Server 2008 to handle different server "workloads" in your organization, including servers that perform as domain controllers, and others that provide DNS, DHCP, Web, File, and Print services. The tested guidance describes how to harden key services like Active Directory® Certificate Services (AD CS), Network Access Services, and Terminal Services.

Security Setting Recommendations
The security guide includes a comprehensive technical reference that explains what each prescribed security setting in the Windows Server 2008 Security Guide does, provides recommended configurations, and identifies the threats that each setting mitigates. A Security Settings Workbook included with the guide also lists all of the prescribed settings for each of the preconfigured security baselines that the guide prescribes.

Help us decide the sessions at the next Microsoft Australia Security Roadshow

Deeps — Mon, 16 Jul 2007 05:04:00 GMT

We have set up a online poll to see what you would like hear at our next Microsoft Australia Security Roadshow. Let us know, the top rated sessions will be delivered at the next Roadshow.

New Forefront Client Security TechCenter

Deeps — Thu, 05 Jul 2007 03:15:00 GMT

We have just released the a new Forefront Client Security TechCenter on TechNet Online. There are some really good resources including:

Dont know what Forefront Client Security is? Watch the Demo Video
Microsoft Forefront Client Security provides unified malware protection for business desktops, laptops, and server operating systems that is easy to manage and control. Built on the same highly successful Microsoft protection technology already used by millions of people worldwide, Forefront Client Security helps guard against emerging threats such as spyware and rootkits, as well as traditional threats such as viruses, worms, and Trojan horses. By delivering simplified administration through central management and providing critical visibility into threats and vulnerabilities, Forefront Client Security helps you protect your business with confidence and efficiency.

Vista 6 month vulnerability report - better than XP?

Deeps — Fri, 22 Jun 2007 07:00:00 GMT

Good report at Jeff Jones blog http://blogs.csoonline.com/windows_vista_6_month_vulnerability_report

For those that only want the executive summary, here is a key chart that shows the publicly disclosed High severity vulnerabilities during the first 90 days of availability, broken down by vulns fixed and vulns unfixed. Note that this chart is showing the reduced Linux builds that exclude non-default and optional components without equivalents on WIndows. (clicking the chart also gets you to the full report.)

TechNet Magazine Online - June 2007

Deeps — Tue, 29 May 2007 03:09:00 GMT

It's security month again. Learn how User Account Control in Windows Vista protects the machines you manage by limiting the administrator privileges users normally run with. BitLocker Drive Encryption, another Vista feature, adds security as well by providing full volume encryption and the validation of startup components.

Also this month, finally get the tools you need to manage and control the kinds of hardware users install and connect to your network. You may be surprised at the range of security improvements this provides. Plus, read up on the four security must-haves: risk management, anti-malware, network anomaly detection, and configuration monitoring.

Finally, see how the Windows Vista firewall offers protection right at your doorstep and how ACL enhancements offer better permissions control.

http://www.microsoft.com/technet/technetmag/

Features
Inside Windows Vista User Account Control
User Account Control, or UAC, is one of the most misunderstood new features in Windows Vista. But its goal—to enable users to run with standard user rights—can solve many security issues. Get an inside look at the problems UAC is designed to address and see exactly how this new feature works. Mark Russinovich

Keys to Protecting Data with BitLocker Drive Encryption
BitLocker serves two very important purposes: it provides both full-volume data encryption and a way to validate the integrity of early startup components before Windows Vista starts. Get an overview of how BitLocker works and see how it can help you protect your organization. Byron Hynes

Exploring the Windows Vista Firewall
Mobility has changed computer threats and the techniques that guard against them. As laptops wander outside the perimeter and come back to the network, you need better ways to protect your systems. Find out how you can use Windows Firewall to protect your computers—on the Internet and on your own internal network. Steve Riley

New ACLs Improve Security in Windows Vista
While ACLs haven't had a major overhaul, there are a number of important changes you need to know about when managing ACLs in a Windows Vista environment. Discover how 30 ACLs have changed to improve security, find out how they will impact your organization, and learn how to manage these changes in your infrastructure. Jesper Johansson

Managing Hardware Restrictions via Group Policy
USB thumb-disk keys and other removable devices can make your personal life easier but your professional life harder. For improved security, you need a way to control what hardware devices your users are installing on their work systems. Now you can use Group Policy to control which devices they can use and which ones they can't.
Jeremy Moskowitz

4 Security Technologies Every IT Organization Must Have
Most businesses share similar security issues. In today's connected world, there are four general types of security tools that every organization absolutely must have. Find out what these tools are and explore how the technologies involved may work together in the future to create the ideal security solution. Matt Clapham and Todd Thompson

A Powerful New Tool for Certificate Management
Certificates are a key component in your infrastructure— when one expires, productivity can come to a halt. If you rely on a Microsoft PKI environment, the new Identity Lifecycle Manager Certificate Management (ILM-CM) solution can help keep things running smoothly. Find out how this tool can help you improve authentication processes and reduce certificate management costs. Kevin Dallmann

Complimentary 1 day Hands on Labs

Deeps — Wed, 23 May 2007 06:51:00 GMT

Microsoft and DDLS is pleased to offer you this complimentary offer to attend a one day technical Hands-On lab, and experience hands-on the System Center and Forefront technology (valued at $600/day+GST), at a city near you.

Forefront Client and Server Security Products Hands on Lab
Microsoft System Center Essentials Hands on Lab
Microsoft System Center Operations Manager 2007 & System Center Configuration Manager 2007 Hands on Lab

How to become an exceptional security manager

Deeps — Mon, 30 Apr 2007 09:43:00 GMT

Good article in Computerworld taking tips from a surgeon's textbook and applying it to IT Security Management.

"The number one indicator for above-average medical care was often simply consistency. In the story related on NPR, the author discussed how one doctor was able to have significantly longer survival rates for his cystic fibrosis patients (47 years) as compared to the national average (33 years). The secret? Consistency. The doctor determined that many patients simply were not taking the recommended medicines consistently and timely. Once he realized this, he focused on making his patients more consistent, especially stressing that they should continue to take the medicine during the majority of the time when they felt well. The outcome was significantly longer living patients.

How many of us work in computer security environments where basic security recommendations are not applied consistently? I think it is nearly impossible to find a company that consistently and universally applies basic security tenets. So, we have inconsistencies, cracks in the system, and bad things are allowed to occur. The very human nature of purposefully allowing inconsistency as a norm leads to below-average outcomes. Taking a personal and institutionalized interest in applying basic security principles consistently will mitigate more risk and lead to a more secure environment."

Read the full article here

TechNet Security and Management Roadshows - Registration open

Deeps — Wed, 28 Mar 2007 09:51:00 GMT

Registration for the TechNet Security and Management Roadshows are now open. Its $149 to register, there is content not only from Microsoft but also Industy partners and customers.

Plus you can also win 1 of 4 foosball tables for your IT Team. Nice.

Click here for more information and registration details

New Forefront Security TechCenters available now

Deeps — Wed, 07 Mar 2007 05:08:00 GMT

Some excellent technical resources around Forefront Security can be found at the new TechCenters. Get your hands on the trials today and start testing.

Forefront Client Security TechCenter
http://www.microsoft.com/technet/clientsecurity/default.mspx

Forefront Security for Exchange Server TechCenter
http://www.microsoft.com/technet/forefront/serversecurity/exchange/default.mspx

Forefront Security for SharePoint TechCenter
http://www.microsoft.com/technet/forefront/serversecurity/sharepoint/default.mspx