D Cornell Securing Share Point
•
0 likes•1,086 views
This document summarizes common approaches to securing SharePoint deployments and identifies common blind spots. It discusses securing the infrastructure and using SharePoint's security features, as well as deploying add-on security products. However, it notes that custom software and data security are often overlooked areas that require additional focus. A comprehensive security strategy is needed to secure SharePoint deployments and address evolving risks.
![Securing SharePoint TASSCC TEC 2009 Web 2.0 Conference Dan Cornell Email: [email_address] Twitter: @danielcornell March 26 th , 2009](https://image.slidesharecdn.com/dcornell-securingsharepoint-090619144312-phpapp01/85/d-cornell-securing-share-point-1-320.jpg)
![Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to D Cornell Securing Share Point
Similar to D Cornell Securing Share Point (20)
Recently uploaded
Recently uploaded (20)
D Cornell Securing Share Point
- 1. Securing SharePoint TASSCC TEC 2009 Web 2.0 Conference Dan Cornell Email: [email_address] Twitter: @danielcornell March 26 th , 2009
- 12. Nature of SharePoint as a Web Application
- 30. How Much Better?
Editor's Notes
- Rotavirus images is Creative Commons Share Alike 3.0: http://en.wikipedia.org/wiki/File:Rotavirus_with_antibody.jpg
- -Security features versus secure features – SharePoint is very buzzword compliance with its provision of “security features” but it is crucial to determine if installations have properly used those security features and also crucial to know if new features that have been developed (WebParts, etc) have been done securely.
- -Multiple tool scans from different vantage points -Using tools like Nessus and the Microsoft Baseline Security Analyzer (MBSA) -Internet scan would only be done if the MOSS server was Internet accessible (naturally)
- ForeFront also has configurable text filtering rules for file content. This may help with some compliance issues that we address elsewhere (SSN, CC# detection)
- -SharePoint uses an XML-based API to push/pull data from many of its constructs