Securing Windows Server 2008: Prevent Attacks from Outside and Inside Your Organization (Paperback)

Microsoft hails the latest version of its flagship server operating system, Windows Server 2008, as "the most secure Windows Server ever". However, to fully achieve this lofty status, system administrators and security professionals must install, configure, monitor, log, and troubleshoot a dizzying array of new features and tools designed to keep the bad guys out and maintain the integrity of their network servers. This is no small task considering the market saturation of Windows Server and the rate at which it is attacked by malicious hackers. According to IDC, Windows Server runs 38% of all network servers. This market prominence also places Windows Server at the top of the SANS top 20 Security Attach Targets. The first five attack targets listed in the SANS top 20 for operating systems are related to Windows Server. This doesn't mean that Windows is inherently less secure than other operating systems; it's simply a numbers game. More machines running Windows Server. More targets for attackers to hack.
As a result of being at the top of the "most used" and "most hacked" lists, Microsoft has released a truly powerful suite of security tools for system administrators to deploy with Windows Server 2008. This book is the comprehensive guide needed by system administrators and security professionals to master seemingly overwhelming arsenal of new security tools including:
1. Network Access Protection, which gives administrators the power to isolate computers that don't comply with established security policies. The ability to enforce security requirements is a powerful means of protecting the network.
2. Enhanced solutions for intelligent rules and policies creation to increase control and protection over networking functions, allowing administrators to have a policy-driven network.
3. Protection of data to ensure it can only be accessed by users with the correct security context, and to make it available when hardware failures occur.
4. Protection against malicious software with User Account Control with a new authentication architecture.
5. Increased control over your user settings with Expanded Group Policy.
...to name just a handful of the new security features. In short, Windows Server 2008 contains by far the most powerful and complex suite of security tools ever released in a Microsoft Server product. Securing Windows Server 2008 provides system administrators and security professionals with the knowledge they need to harness this power.


* Describes new technologies and features in Windows Server 2008, such as improvements to networking and remote access features, centralized server role management, and an improved file system.
* Outlines steps for installing only the necessary components and subsystems of Windows Server 2008 in your environment. No GUI needed.
* Describes Windows Server 2008?s security innovations, such as Network Access Protection, Federated Rights Management, and Read-Only Domain Controller
* Includes coverage of monitoring, securing, and troubleshooting Windows Server 2008
* Covers Microsoft's Hyper-V virtualization technology, which is offered as an add-on to four of the eight versions of Windows Server 2008 and as a stand-alone product

Microsoft稱其旗艦伺服器作業系統Windows Server 2008的最新版本為「有史以來最安全的Windows Server」。然而，要完全實現這一崇高的地位，系統管理員和安全專業人員必須安裝、配置、監控、記錄和疑難排解一系列新功能和工具，這些功能和工具旨在阻止不良分子進入並維護其網絡伺服器的完整性。考慮到Windows Server的市場飽和度以及惡意駭客對其發動攻擊的速度，這不是一個小任務。根據IDC的數據，Windows Server運行著38%的所有網絡伺服器。這種市場地位也使Windows Server成為SANS前20個安全攻擊目標中的頭號目標。在SANS前20個操作系統的攻擊目標中，前五個與Windows Server有關。這並不意味著Windows本質上比其他操作系統不安全；這只是一個數字遊戲。運行Windows Server的機器更多，攻擊者的目標也更多。

由於位於「最常使用」和「最常遭受駭客攻擊」的榜單頂端，Microsoft釋出了一套真正強大的安全工具套件供系統管理員在Windows Server 2008上部署。本書是系統管理員和安全專業人員所需的全面指南，以掌握看似令人眼花繚亂的新安全工具，包括：

1. 網絡存取保護(Network Access Protection)，使管理員能夠隔離不符合既定安全策略的計算機。強制執行安全要求是保護網絡的有力手段。
2. 增強的智能規則和策略創建解決方案，增加對網絡功能的控制和保護，使管理員能夠擁有基於策略的網絡。
3. 保護數據，確保只有具有正確安全上下文的用戶才能訪問數據，並在硬件故障發生時使其可用。
4. 使用新的身份驗證架構的用戶帳戶控制(User Account Control)來防範惡意軟件。
5. 通過擴展的群組策略(Expanded Group Policy)增加對用戶設置的控制。

......只是其中一小部分新安全功能的名稱。簡而言之，Windows Server 2008包含了迄今為止在Microsoft Server產品中發布的最強大和複雜的安全工具套件。《Securing Windows Server 2008》為系統管理員和安全專業人員提供了他們掌握這種強大力量所需的知識。

本書內容包括：

- 描述Windows Server 2008的新技術和功能，例如改進的網絡和遠程訪問功能、集中式伺服器角色管理和改進的文件系統。
- 概述在您的環境中僅安裝所需的Windows Server 2008組件和子系統的步驟。無需圖形用戶界面(GUI)。
- 描述Windows Server 2008的安全創新，例如網絡存取保護、聯合權限管理和唯讀域控制器。
- 包括監控、保護和疑難排解Windows Server 2008的內容。
- 覆蓋Microsoft的Hyper-V虛擬化技術，該技術作為Windows Server 2008的八個版本中的四個版本的附加功能提供，也作為獨立產品提供。