"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
ITCamp 2012 - Paula Januszkiewicz - Stronghold to Strengthen
1. ITCamp 2012 sponsors Private &
Public Cloud
@ itcampro # itcamp12 Premium conference on Microsoft technologies
2. @ itcampro # itcamp12 Premium conference on Microsoft technologies
3. Agenda Private &
Public Cloud
Intruduction Infrastructure Techniques
1 2 3 4
Hardening Techiques Summary
@ itcampro # itcamp12 Premium conference on Microsoft technologies
4. Hacker Role in IT Development Private &
Public Cloud
• Hackers make IT security world running
• Hackers encourage us to be up to date
• Hackers test the newest technology
What is the security
trend?
@ itcampro # itcamp12 Premium conference on Microsoft technologies
9. Security Intelligence Report Private &
Public Cloud
http://www.microsoft.com/security/sir/
@ itcampro # itcamp12 Premium conference on Microsoft technologies
10. Agenda Private &
Public Cloud
Intruduction Infrastructure Techniques
1 2 3 4
Hardening Techiques Summary
@ itcampro # itcamp12 Premium conference on Microsoft technologies
11. External Views Private &
Public Cloud
@ itcampro # itcamp12 Premium conference on Microsoft technologies
12. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
13. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
14. @ itcampro # itcamp12 Premium conference on Microsoft technologies
15. Test Your Users Private &
Public Cloud
• Play a social engineer role
• Monitor them…
• …and show you do it
• Break users’ passwords
• Train them well
@ itcampro # itcamp12 Premium conference on Microsoft technologies
16. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
17. Private &
Know At Least One Scripting Language Public Cloud
• Hackers love scripts
– Perl
– Python
• You should love PowerShell 2.0
– Server Role management modules
– Server management
– Remoting
– Microsoft Common Criteria
@ itcampro # itcamp12 Premium conference on Microsoft technologies
19. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
20. WYSI (NOT) WYG
@ itcampro # itcamp12 Premium conference on Microsoft technologies
21. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
22. Use Debugger Private &
Public Cloud
• Variable choices:
– SoftICE
– WinDbg
– DEBUG
– IDA Pro
• One idea:
– To look through the code and data
structures
• Administrators: Crash dump analysis
• Process Explorer
@ itcampro # itcamp12 Premium conference on Microsoft technologies
Picture: commons.wikimedia.org
23. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
24. @ itcampro # itcamp12 Premium conference on Microsoft technologies
25. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
26. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
27.
28. Network Monitoring Private &
Public Cloud
• Watch for protocol anomalies
– Data can leak through the data
field
– Watch for protocols used not
only for data transfers
• Monitor the traffic
– Unfortunately some traffic may
happen only once a month
@ itcampro # itcamp12 Premium conference on Microsoft technologies
29. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
30. @ itcampro # itcamp12 Premium conference on Microsoft technologies
31. Agenda Private &
Public Cloud
Hacker role in IT
Things you should remember and summary
development
1 2 3
Hacker Techniques and Demos
@ itcampro # itcamp12 Premium conference on Microsoft technologies
32. Lack of General Revisions
Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies
33. Lack of Training
@ itcampro # itcamp12 Premium conference on Microsoft technologies
34. Keep Your Knowledge Up To Date Private &
Public Cloud
• Know law regulations in your country
• IT resources
– Mailing Lists
– Blogs / RSS
– Webcasts
• Security bulletins
– Microsoft
– SANS
– ISS
@ itcampro # itcamp12 Premium conference on Microsoft technologies
35. Have Your Own Toolkit Private &
Public Cloud
• Internet Browser is sometimes enough
• CMD and build-in system tools
• Specialist tools
• Your own scripts
• Social engineering skills
• PowerShell 2.0/3.0
@ itcampro # itcamp12 Premium conference on Microsoft technologies
36. paula@idesign.net
Thank you!
@ itcampro # itcamp12 Premium conference on Microsoft technologies
