Security Tips of the Month

Find actionable guidance to help you leverage Microsoft's latest security products and technologies to better secure and protect information in your organization.

2012

• Monitor Key Security Controls to Prevent Data Breach
  

  Learn how to use Microsoft's free Security Compliance Manager tool to help you to monitor patch status, identify changes to the administrators group, and report on the use of whitelists using the desired configuration management feature in System Center Configuration Manager.

• DNSSEC and DNS Amplification Attacks
  

  Learn how, combined with source address spoofing, an attacker can direct a large volume of network traffic to a target system by initiating relatively small DNS queries so that you can better protect your network from this type of attack.

• Threat Modeling and Agile Development Practices
  

  Find out how to effectively perform threat modeling for projects that demand rapid development processes.

2011

• Simple Security Recommendations When Using Hyper-V
  

  Learn about a few simple security recommendations that you can use to maximize your deployment of Hyper-V virtualization technology.

• Security Best Practices for Microsoft Office 2010 Applications
  

  Explore the resources that can best help you understand Office 2010 security capabilities and security best practices for deploying and maintaining Office 2010 in your environment.

• Prioritizing Microsoft Security Update Deployment Using Severity Ratings and the Updated Exploitability Index
  

  Each Microsoft security update carries two pieces of information that help with the prioritization process: the severity rating and the Exploitability Index. Explore each of these items in detail and learn how they can add a new dimension of information that can help you prioritize decisions.

• Five Security Tips for Windows Intune
  

  Learn how to use the security features in Windows Intune, Microsoft's cloud services solution for PC management and endpoint protection, to implement best practices that can help you better protect your PCs.

• Improving Security Using Attack Surface Analyzer
  

  Learn how to use the Microsoft Attack Surface Analyzer tool to better understand the aggregate attack surface change that may result from the introduction of line-of-business (LOB) applications to the Windows platform.

• Web App Security with the Microsoft Simplified SDL
  

  Get a brief overview of common threat considerations for Web application development and deployment then find out how you can leverage the Microsoft Simplified Security Development Lifecycle (SDL) to help mitigate those threats while achieving the speed and efficiency of cloud computing.

2010

• Using the Enhanced Mitigation Experience Toolkit to Safeguard Against Zero Days
  

  There have been a number of zero-day vulnerabilities circulating around the Internet recently. Find out how the Enhanced Mitigation Experience Toolkit (EMET) can help you manage security mitigations for your systems

• Blocking Automated SQL Injection Attacks
  

  Explore one technique you can use to block automated SQL injection attacks against web applications that use Microsoft SQL Server as the back-end processor.

• How to Deploy Your First Windows Azure Application: Step by Step
  

  Learn how to configure and deploy a new application, create a new storage service for the application's data access, and more in this video tutorial.

• Post aVirtualiptica: Addressing Incidents in a Virtual Environment
  

  Learn about the tools, techniques, and processes that may help you obtain information about your virtual machines and address incidents such as stoppages and security breaches.

• Using the Microsoft Security Response Center Exploitability Index
  

  Learn how to use the Exploitability Index to help prioritize Microsoft security update deployments.

• Security: Home vs. the Enterprise
  

  Explore the reasons why home (non-domain) users and those who use enterprise (domain-joined) computers face different vulnerabilities then find a selection of best practices and solutions that should be considered to help protect your users.

• Application Privacy Assessments
  

  Find out how to easily evaluate how well an application and its operating environment stack up against industry privacy and data security best practices, how well they comply with your organization’s privacy and data security policies.

• Self-Service Identity Management with Microsoft Forefront Identity Manager (FIM) 2010
  

  Learn how to use FIM 2010 to facilitate self-service password resets and group management with this quick, step-by-step tutorial from IT Content Architect Alan Le Marquand.

• User-Controlled Attributes in Forefront Identity Manager 2010
  

  Learn how the Forefront Identity Manager (FIM) 2010 self-service user profile management can be configured for a privacy scenario, enabling end users to selectively control who can view their home phone number.