Windows NT security Book

1. Introduction to Security Concepts.
Layered Approach to Securing Your Network. Physical Security. Location. Use of Removable Media. Removal of Unnecessary Hardware. Denial of Service. IT Security Control Objectives. Confidentiality. Integrity. Availability. Legal Notice at Logon. Qualities Defining a Secure System. Discretionary Access Controls. Audit Capabilities. Mandatory Identification and Authentication. Memory Management and Object Reuse. Encrypted Data Transfer. Encrypted File System. Summary.
2. NT 4.0 Security Architecture Overview.
Design Goals for Windows NT 4.0 Security. Modules of the NT 4.0 Security Architecture. Graphical Identification and Authentication (GINA) DLL. Trusted System. Objects. Access Control Lists (ACL). Access Control Entry (ACE). System Identifier (SID). Local Security Authority (LSA). Access Tokens. Security Reference Monitor (SRM). Security Account Manager (SAM). File and Directory Permissions. Mandatory Logon Process. Single Logon. Security Support Provider Interface (SSPI). Intra- and Interdomain Communication. Authenticated RPC and DCOM. NTLM Authentication. Impersonation. Security Implementation Overview. Installation Security Concerns. Logon and the Authentication Process. The Administrator Account. File and Directory Security. Registry Security. User Profiles. System Policies. Auditing Capability. New Security Management Tools. Microsoft Management Console. Security Configuration Manager for NT. Microsoft Proxy Server.