Windows 2000 Security: Locking Down Win2K
Keith Nugent explores windows 2000 security: locking down win2k at DEF CON 9, examining windows-2000 and practical defenses.
Summary
Architecture and Background
Keith Nugent - Windows 2000 Security: How to lock down your Win2k boxes Windows 2000 provides a lot of new security features that were previously not available in earlier versions. The NT line, however, has never been considered very secure right out of the box.
Vulnerability Analysis
We'll be talking about how to use NTFS permissions, Default Security templates, Custom Security templates, and Group Policy to lock down a Win2k box. We'll look at what level of security is applied by default on a Win2k box, how to analyze these settings against proposed settings, and how to apply identical settings across multiple boxes.
Exploitation and Demonstrations
Keith Nugent has been playing with computers since his father first brought home an Apple iic. Being the youngest child, it thrilled him to no end to have something that would respond to HIS commands, as he was used to being the one who followed commands.
Remediation and Defensive Strategies
Keith toyed with Apples and PC's for the next few years while he did other things, like grow up, go to college, run a business, and drive a tractor-trailer around the country. Then, a few years back, as tends to happen, he was the guy who was always fixing, operating, and training others on the computer. So he gave in and became the network administrator. Now years later, he's given up the pager and 3am-the-sky-is-falling phone calls of network administration to train full time. Keith is currently the technical training supervisor for a large computer training center in Chicago, IL.
Related talks
Main Stage·52 min
Jay Beale
Jay Beale - Attacking and Securing FTP The Unix FTP servers have been called 'the IIS of the Unix world' for their frequent and potent vulnerabilities.
Main Stage·53 min
Jay Beale
Jay Beale - Bastille Linux 2.
Main Stage·47 min
Daniel Bohannon · Sabajete Elezaj
Deep exploration into LDAP query obfuscation techniques and detection strategies across Active Directory environments.


