1. ITCamp 2012 sponsors Private &
Public Cloud
@ itcampro # itcamp12 Premium conference on Microsoft technologies

2. @ itcampro # itcamp12 Premium conference on Microsoft technologies

3. Agenda Private &
Public Cloud
Intruduction Infrastructure Techniques
1 2 3 4
Hardening Techiques Summary
@ itcampro # itcamp12 Premium conference on Microsoft technologies

4. Hacker Role in IT Development Private &
Public Cloud
• Hackers make IT security world running
• Hackers encourage us to be up to date
• Hackers test the newest technology
What is the security
trend?
@ itcampro # itcamp12 Premium conference on Microsoft technologies

8. 19790509
8

9. Security Intelligence Report Private &
Public Cloud
http://www.microsoft.com/security/sir/
@ itcampro # itcamp12 Premium conference on Microsoft technologies

10. Agenda Private &
Public Cloud
Intruduction Infrastructure Techniques
1 2 3 4
Hardening Techiques Summary
@ itcampro # itcamp12 Premium conference on Microsoft technologies

11. External Views Private &
Public Cloud
@ itcampro # itcamp12 Premium conference on Microsoft technologies

12. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

13. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

14. @ itcampro # itcamp12 Premium conference on Microsoft technologies

15. Test Your Users Private &
Public Cloud
• Play a social engineer role
• Monitor them…
• …and show you do it
• Break users’ passwords
• Train them well
@ itcampro # itcamp12 Premium conference on Microsoft technologies

16. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

17. Private &
Know At Least One Scripting Language Public Cloud
• Hackers love scripts
– Perl
– Python
• You should love PowerShell 2.0
– Server Role management modules
– Server management
– Remoting
– Microsoft Common Criteria
@ itcampro # itcamp12 Premium conference on Microsoft technologies

18. Demo
Incorrect Access Control Lists
@ itcampro # itcamp12 Premium conference on Microsoft technologies

19. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

20. WYSI (NOT) WYG
@ itcampro # itcamp12 Premium conference on Microsoft technologies

21. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

22. Use Debugger Private &
Public Cloud
• Variable choices:
– SoftICE
– WinDbg
– DEBUG
– IDA Pro
• One idea:
– To look through the code and data
structures
• Administrators: Crash dump analysis
• Process Explorer
@ itcampro # itcamp12 Premium conference on Microsoft technologies
Picture: commons.wikimedia.org

23. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

24. @ itcampro # itcamp12 Premium conference on Microsoft technologies

25. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

26. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

28. Network Monitoring Private &
Public Cloud
• Watch for protocol anomalies
– Data can leak through the data
field
– Watch for protocols used not
only for data transfers
• Monitor the traffic
– Unfortunately some traffic may
happen only once a month
@ itcampro # itcamp12 Premium conference on Microsoft technologies

29. Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

30. @ itcampro # itcamp12 Premium conference on Microsoft technologies

31. Agenda Private &
Public Cloud
Hacker role in IT
Things you should remember and summary
development
1 2 3
Hacker Techniques and Demos
@ itcampro # itcamp12 Premium conference on Microsoft technologies

32. Lack of General Revisions
Demo
@ itcampro # itcamp12 Premium conference on Microsoft technologies

33. Lack of Training
@ itcampro # itcamp12 Premium conference on Microsoft technologies

34. Keep Your Knowledge Up To Date Private &
Public Cloud
• Know law regulations in your country
• IT resources
– Mailing Lists
– Blogs / RSS
– Webcasts
• Security bulletins
– Microsoft
– SANS
– ISS
@ itcampro # itcamp12 Premium conference on Microsoft technologies

35. Have Your Own Toolkit Private &
Public Cloud
• Internet Browser is sometimes enough
• CMD and build-in system tools
• Specialist tools
• Your own scripts
• Social engineering skills
• PowerShell 2.0/3.0
@ itcampro # itcamp12 Premium conference on Microsoft technologies

36. paula@idesign.net
Thank you!
@ itcampro # itcamp12 Premium conference on Microsoft technologies