Steve Riley on Security

Browse by Tags

Enabling Secure Anywhere Access in a Connected World: A few times each year, Bill Gates or Steve Ballmer publish an executive memo. The first memo was Bill's essay on trustworthy computing , in July 2002. Today Bill has a new memo , one that is very important for all of us who strive to achieve a balance Read More...
Posted 06 February 07 12:47 by Steve Riley | 1 Comments
Filed under access technologies, security policies, protection, networking
Did you know that you ALREADY have an e-mail policy?: An email access policy can be expressed in one of two ways: E-mail is mission critical to our business. Therefore, we permit employees to read and compose e-mail from any location in the world where employees can access the Internet, using either company-issued Read More...
Posted 10 September 06 05:34 by Steve Riley | 7 Comments
Filed under email, access technologies, security policies, risk mitigation, protection
Configure your router to block DOS attempts: Some time ago I had a discussion with a friend. He disagreed with my recommendations on how to configure a border router and the firewall behind it. I claimed that in the border router between you and your ISP, configure the six rules to block most denial Read More...
Posted 10 July 06 01:27 by Steve Riley | 13 Comments
Filed under access technologies, security policies, risk mitigation, threats, protection, configuration
Should your ISA Server be in your domain? Film at 11!: So it would seem that a statement I made during TechEd US last week in Boston has mildly stirred a bit of controversy -- no surprise there, I guess, heh. One of my presentations gave an overview of what's new in ISA Server 2006 ( download your copy of Read More...
Posted 21 June 06 04:21 by Steve Riley | 10 Comments
Filed under access technologies, protection, TechEd, ISA Server, configuration
What do YOU need out of two-factor authentication?: Two-factor authentication continues to grow in popularity and emerge as a security requirement for many people I meet with. At Microsoft, we use smartcards internally for VPN access right now; soon we'll be requiring smartcards for domain logon, too. Read More...
Posted 20 April 06 03:37 by Steve Riley | 43 Comments
Filed under identity, authentication, biometrics, email, access technologies, security policies, risk mitigation, passwords
Remote Access Quarantine (TechNet Magazine article): http://www.microsoft.com/technet/technetmag/issues/2006/03/SecurityWatch/default.aspx In those good old easy-to-manage pre-mobility days, personal computers presented few actual threats to a network. Sure, there was the occasional virus you’d get from Read More...
Posted 28 February 06 03:58 by Steve Riley | 9 Comments
Filed under NAP, access technologies, ISA Server, VPN
How to secure your wireless network: I'm now a contributing editor for TechNet Magazine . Everyone with a TechNet subscription automatically receives it; if you don't have one, you can still get the magazine free . The magazine's published three issues so far: Winter 2005 , Spring 2005 , Read More...
Posted 11 November 05 11:43 by Steve Riley | 4 Comments
Filed under authentication, access technologies, threats, protection, wireless
August article: 802.1X on wired networks considered harmful: Several months ago I learned from Svyatoslav Pidgorny, Microsoft MVP for security, about a problem in 802.1X that makes it essentially useless for protecting wired networks from rogue machines. Initially I was a bit skeptical, but the attack he described Read More...
Posted 11 August 05 10:55 by Steve Riley | 16 Comments
Filed under NAP, authentication, access technologies, risk mitigation, threats, protection, security science, wireless
Securing Terminal Services over the Internet: In my presentation on remote access at TechEd, I gave three scenarios: web-based access to internal resources, published with ISA Server "desktop over the Internet" using Terminal Services and the remote desktop web connection full IP-based virtual private Read More...
Posted 28 June 05 09:54 by Steve Riley | 3 Comments
Filed under access technologies, protection, TechEd, configuration, Terminal Server
New column -- Using IPsec for network protection: I'm now writing semi-regular articles for TechNet. These are part of the security management series, and they're also linked from the security newsletter. The first column is a two-parter about IPsec. Part 1 describes the technology: how it operates, Read More...
Posted 10 February 05 09:59 by Steve Riley | 6 Comments
Filed under identity, authentication, access technologies, protection, configuration, IPsec

Steve Riley on Security

Browse by Tags

Search

This Blog

Resources for you

Tags

Archives

Syndication