Windows 2008 Security.ppt

Security Yaniv Feldman Senior Infrasec Architect Microsoft Security Regional Director Db@net Windows Server 2008 Reduces costs, increases hardware utilization, optimizes your infrastructure, and improves server availability Delivers rich web-based experiences efficiently and effectively Provides unprecedented levels of protection for your network, your data, and your business Server Protection Features Development Process Secure Startup and shield up at install Code integrity Windows service hardening Inbound and outbound firewall Restart Manager Improved auditing Network Access Protection Event Forwarding Policy Based Networking Server and Domain Isolation Removable Device Installation Control Active Directory Rights Management Services Security Compliance Windows Service HardeningDefense In Depth Reduce size ofhigh risk layers Segment theservices Increase # of layers Kernel Drivers User-mode Drivers Service 1 Service 2 Service 3 Service… Service … Service A Service B Windows Server 2008 Hardening Windows? XP SP2/Server 2003 R2 LocalSystem Windows Vista/Server Longhorn Network Service Local Service LocalSystem Firewall Restricted Network Service Network Restricted Local Service No Network Access LocalSystem Network Service Fully Restricted Local Service Fully Restricted Windows Firewall w/ Advanced Security Combined firewall and IPsec management Firewall rules become more intelligent Policy-based networking Server Core Security, TCP/IP, File Systems, RPC,plus other Core Server Sub-Systems Windows Server Core GUI, CLR, Shell, IE, OE, etc. WSv DHCP DNS File Print Only a subset of the executable files and DLLs installed No GUI interface installed 9 available Server Roles Can be managed with remote tools AD DS AD LDS Media IIS 7 IIS 7.0 Managing Your Web with IIS 7.0 Arsenal of Admin Tools Delegated Management Secure Remote Management Shared Config for Web Farms Delegation XCopy Deploy Manage Remotely Secure HTTPS SharedConfig Shared App Hosting