Index
W
W3C Extended log file format, 266–267, 266–267 “war driving” threat, 99 Web Interface for Remote Administration tool, 372 Web Service Extensions, 256, 256–257 web.config file, 261 WebDAV utility, 257, 271 website addresses L2TP/IPSec clients, 75, 89 Microsoft comparing update services, 343 SUS installer, 345 "Threats and Countermeasures:…," 222 Windows Update, 342 XP Security Guide, 329 MS-CHAP/MS-CHAPv2 vulnerabilities, 85 NetStumbler, 106 nmap utility, 40 RFC 2196, 10 Schneier, Bruce, 85 Secure Sockets Layer, 72 Transport Layer Security, 72 website vandalism attacks, 5 websites, publishing certificates to, 217 WEP (Wireless Equivalent Privacy), 100, 100 wi-fi, 99 Windows Registry security, 174, 175, 331 Windows Script Host tool, 371
Windows Server 2003 as an asset at risk, 3 default installed services, 250–253 Security Guide, 293, 297 Windows Task Manager, 49–50, 49 Windows Update, 342 , 343 Windows XP Security Guide, 329–331 WinHTTP WPAD (Web Proxy Auto-Discovery) Service, 25
wireless (802.11x) networks, See also network 802.11a/11b/11g standards, 99 design scenario, 107 designing open access points, 105, 105 enabling on clients, 102–103, 102–103 Group Policy Security Settings, 101–102, 101 overview, 99, 106 PEAP protocol, 103–104, 103–104 security options MAC address filtering, 100 overview, 99 Service Set Identifier, 100 Wireless Equivalent Privacy, 100, 100 threats to, 99, 106 vulnerabilities, 105 Wireless Configuration service, 253 World Wide Web Publishing Properties dialog box, 294–295, 295 World Wide Web Publishing Service (HTTP), 255 worm attacks, 5