Microsoft has announced a large number of security webcasts that are set for April. The list here is quite long, so click to see them all, or check out the Security Webcast Calendar, which is a Word doc calendar with all the upcoming webcasts listed and linked.
There are lots of very good sessions planned. Anyone with a security responsibility or emphasis in their jobs should take a good look at these upcoming webcasts and consider viewing...
Upcoming Security Webcasts: April 2005
Security Webcasts are a convenient way for IT Professionals and Developers to stay technically updated on the latest Microsoft Security Guidance. These webcasts concentrate on security information and are presented by senior executives and other subject matter experts. They feature interactive technical presentations, product demonstrations, and question-and-answer sessions.
Microsoft Security Webcast Series: Upcoming & On-Demand
Security Webcast Calendar
NEW: Now you can register for an on-demand webcast and choose how you would like to view the archive. Downloadable Microsoft Office System PowerPoint and .wmv files are available for most webcasts that took place Dec. 1, 2004 or later. Once you register, you will be directed to the on-demand webcast and also shortly receive a confirmation email with links to the PowerPoint and .wmv downloads.
Additional Webcast Resources
Microsoft Security Webcast Series: Upcoming & On-Demand
Digital Blackbelt Series: Defend your code from attacks
Ongoing through May
How would your code stand up to an attack? If you are not sure, join us for the Digital Blackbelt webcast series as Developer Community Champion Joe Stagner discusses security risks, vulnerabilities, and solutions from the software developer's perspective. We will provide real-life examples and security tips and tricks that can help you gain the knowledge and techniques to become an experienced “blackbelt” in writing secure code.
Web Development: Increase the security of your applications
Ongoing through May
Increasing the security of your software is not the result of a single event. From design through development, to testing and deployment, a multi-disciplinary approach must be taken to deliver a quality software product that minimizes organizational risk. Join Dennis Hurst, Senior Consulting Engineer at SPI Dynamics, and other guest speakers as they detail knowledge that can help developers increase security around the coding of web applications.
Security360
Third Tuesday of Every Month
Learn best practices to guide your security strategy during this monthly webcast series. Each webcast focuses on a specific security topic and includes commentary from industry experts outside of Microsoft.
Security Webcast Calendar
Security webcasts listed in an easy-to-use calendar format.
BONUS: Attend any live webcast through June and you could win a Portable Media Center. See official rules for more details.
Additional Live & On-Demand Webcast Series Available NOW:
For IT Executives
Microsoft Executive Circle Webcast: Security360 with Mike Nash: Secure E-mail, It’s More than Filtering (Level 100)
Tuesday, April 19, 2005 - 9:00 AM - 10:00 AM Pacific Time
Mike Nash, Corporate Vice President Security Business & Technology Unit, Microsoft
Reducing the amount of spam clogging e-mail systems is top-of-mind. However, e-mail security is not just about preventing unsolicited messages; it is also about protecting the digital information assets you send through e-mail. On this month's Security360, guest host Amy Roberts, director of product management in Microsoft's Security Business and Technology Unit, will discuss with industry experts the whole spectrum of e-mail security, including filtering technologies, e-mail policies and enforcement, and partner solutions. As with every Security360, this session includes a checklist of recommendations and resources, as well as a live Q&A with industry experts.
http://go.microsoft.com/fwlink/?LinkId=43965
For IT Professionals
TechNet Webcast: Implementing Exchange Server Security (Part 1 of 2): Securing Services and Messaging Protocols (Level 300)
Monday, April 04, 2005 - 1:00 PM - 2:00 PM Pacific Time
Harold Wong, TechNet Presenter, Microsoft
Securing communication over networks is essential to securing your organization from intrusions, overloads, and interruptions of many types. In this first session of a two-part series on Exchange Server Security, we describe how to deploy a more secure Exchange Server 2003 infrastructure and how to secure its server services and messaging protocols.
http://go.microsoft.com/fwlink/?LinkId=43587
TechNet Webcast: How Microsoft IT Deployed PKI Inside Microsoft (Level 300)
Tuesday, April 05, 2005 - 9:00 AM - 10:00 AM Pacific Time
Larry Talbot, Microsoft IT SECURITY TECHNOLOGIST, Microsoft
This webcast presents a detailed discussion of how Microsoft IT installed a Public Key Infrastructure, built originally with Windows 2000 Server Certificate Services, and later upgraded with Windows Server 2003, to implement a secure communications and remote authentication infrastructure. This enabled the use of S/MIME signatures and encryption, secured Web connections by using SSL or TLS, ensured the confidentiality of stored data by using EFS, ensured the confidentiality and integrity of transmitted date by using IPSec, and enabled strong network user authentication by using Smart Cards. Join this webcast to find out how you can do this - or something similar - too.
http://go.microsoft.com/fwlink/?LinkId=44148
TechNet Webcast: "Ask The IT Security Experts" Series: Building Security Training and Awareness (Level 100)
Tuesday, April 05, 2005 - 11:00 AM - 12:00 PM Pacific Time
Ben Smith, Senior Security Strategist, Microsoft
Experts often talk about the importance and need for security training, but few actually talk about how to do it. Join us for this webcast as we bring together some of the sharpest security-focused Microsoft IT professionals to provide expert answers to your questions about Building Security Training and Awareness. This webcast presents proven, and slightly unconventional, methods of training users and administrators on security. As with all of our "Ask the Experts" webcasts, there will be plenty of Q&A time for the experts to field your questions. Send your security-related questions to our panel of experts ahead of time at: itxcast@microsoft.com.
http://go.microsoft.com/fwlink/?LinkId=43974
TechNet Webcast: Network Isolation Using Group Policy and IPSec (Part 1 of 3): Overview of Internet Protocol Security (Level 300)
Wednesday, April 06, 2005 - 11:00 AM - 12:30 PM Pacific Time
John Baker, TechNet Presenter, Microsoft
Data Isolation: How can it make your IT infrastructure safer, and how do you use Group Policies and IPSec to implement it? This session is the first of a three-part series presenting the information and tasks needed to implement data isolation using Group Policies and IPSec within an organization. This first installation provides an overview of the nature of Internet Protocol Security - the challenges to secure network communication, how IPSec can help, and the various ways IPSec can be implemented to achieve different types of secure communication.
http://go.microsoft.com/fwlink/?LinkId=43592
TechNet Webcast: Windows Server 2003 SP1 Technical Overview (Level 200)
Thursday, April 07, 2005 - 9:00 AM - 10:30 AM Pacific Time
Rand Morimoto, Author, President, Convergent Computing
Windows Server 2003, the latest server operating system from Microsoft, builds upon the security, reliability, and performance improvements implemented in previous versions. Organizations need these continuing improvements as their networks develop and network usage evolves with new technologies. Organizations also need Service Pack 1 to protect themselves from an increasing variety of network and computer. Join this webcast for a technical overview of Windows Server 2003 Service Pack 1, where we will present its features, configuration tools, system security enhancements, network security enhancements, and deployment options.
http://go.microsoft.com/fwlink/?LinkId=43599
TechNet Webcast: SQL Server 2005 Series (Part 4 of 10): Securing your SQL Server (Level 200)
Monday, April 11, 2005 - 9:00 AM - 10:00 AM Pacific Time
Bryan Von Axelson, TechNet Presenter, Microsoft
Parts four and five in our series highlight the security enhancements in SQL Server 2005. Part four of this series focuses on authentication and authorization while crypto support is covered in part five. We begin with authentication, examining the Security model, endpoint-based authentication and the password policy. Then we move on to explore authorization, covering User Schema separation, module execution context, granular permission control and Catalog security.
http://go.microsoft.com/fwlink/?LinkId=42448
TechNet Webcast: Implementing Exchange Server Security (Part 2 of 2): Protecting Against Unwanted E-Mail (Level 300)
Monday, April 11, 2005 - 1:00 PM - 2:00 PM Pacific Time
Chris Avis, TechNet Presenter, Microsoft
This second session of a two-part series on Exchange Server Security describes how to increase the security of e-mail that flows through an organization's Exchange servers. We also introduce you to Exchange Server 2003 features such as Real Time Block List support and Intelligent Message Filtering, tools making it easier to reduce the amount of unwanted e-mail before it spreads through your organization.
http://go.microsoft.com/fwlink/?LinkId=43602
TechNet Webcast: How Microsoft IT Implements Trustworthy Messaging at Microsoft (Level 300)
Tuesday, April 12, 2005 - 9:00 AM - 10:00 AM Pacific Time
Grant Hogan, Microsoft IT Service Manager, Microsoft
Similar to most enterprise organizations, Microsoft shares information among its resources through e-mail and other electronic documentation. At the same time, we have a concern for the security and privacy of this data. With that in mind, Microsoft created the Trustworthy Messaging initiative to provide confidentiality for key business sensitive data sent to and from internal corporate clients without sacrificing their ability to freely share this data. Join us as we review, in detail, Microsoft IT's implementation of Trustworthy Messaging.
http://go.microsoft.com/fwlink/?LinkId=44151
TechNet Webcast: Information about Microsoft's April Security Bulletins (Level 100)
Wednesday, April 13, 2005 - 11:00 AM - 12:00 PM Pacific Time
Christopher Budd, CISM, CISSP/Security Program Manager, Microsoft
Debby Fry Wilson, Director/Security Response Marketing, Microsoft
On April 12th, Microsoft will release its monthly security bulletins. Join this webcast for a brief overview of the technical details of these April security bulletins. This webcast will provide you the opportunity to raise your questions and concerns about the security bulletins. A majority of the session will be devoted to addressing your questions and providing answers from our security experts.
http://go.microsoft.com/fwlink/?LinkId=43750
TechNet Webcast: Network Isolation Using Group Policy and IPSec (Part 2 of 3): Understanding Network Isolation Using IPSec (Level 300)
Wednesday, April 13, 2005 - 1:00 PM - 2:00 PM Pacific Time
John Baker, TechNet Presenter, Microsoft
This session is the second of a three-part series with the information and tasks you need to implement data isolation using Group Policies and IPSec. This session shows how to use IPSec to create network isolation zones. Topics include the advantages and limitations of network isolation, where network isolation fits into a defense-in-depth scheme, and how to use Group Policies and Active Directory groups to restrict access to specific servers.
http://go.microsoft.com/fwlink/?LinkId=43606
TechNet Webcast: Maximizing Security Features within Microsoft Office Live Communications Server 2005 (Level 300)
Thursday, April 14, 2005 - 9:00 AM - 10:30 AM Pacific Time
Sean Olson, Lead Program Manager, Microsoft
This technical session describes potential security threats and their mitigations for the Microsoft Office Live Communications Server 2005 release. We will focus on the new features and challenges differentiated from Live Communications Server 2003. The ultimate goal of this presentation is to provide you with the information commonly required to satisfy a security audit of a product prior to its commercial deployment. Topics will include authentication, auditing, and security recommendations for the new Live Communications Server 2005.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032269267&Culture=en-US
TechNet Webcast: Securing the Network Perimeter with ISA Server 2004 (Level 200)
Friday, April 15, 2005 - 11:00 AM - 12:30 PM Pacific Time
Keith Combs, TechNet Presenter, Microsoft
Do you currently have an effective way to secure your network perimeter against risks introduced by the Internet, remote users, and remote network segments? Learn how Microsoft Internet Security and Acceleration (ISA) Server 2004 can help protect against all of these threats and more. This session demonstrates how ISA Server 2004 can enhance security for internal servers as well as external-facing resources such as Microsoft Exchange Server or Microsoft Internet Information Services. We will also show how ISA Server can operate as a virtual private networking server for more secure remote access to the internal network.
http://go.microsoft.com/fwlink/?LinkId=43759
TechNet Webcast: SQL Server 2005 Series (Part 5 of 10): Protecting Sensitive Data (Level 200)
Monday, April 18, 2005 - 9:00 AM - 10:00 AM Pacific Time
Bryan Von Axelson, TechNet Presenter, Microsoft
Parts four and five in our series highlight the security enhancements in SQL Server 2005. Building upon the discussion of authentication and authorization in the previous session, part five of the series covers the crypto support in SQL Server 2005. We begin with an introduction to the concepts of database encryption including encryption support, keys, certificates and key management. We show how SQL 2005 can protect sensitive data using data encryption and module signatures, and introduce sign modules, what these are and how they work.
http://go.microsoft.com/fwlink/?LinkId=42450
TechNet Webcast: Assessing Network Security (Part 1 of 2): Planning and Research (Level 200)
Monday, April 18, 2005 - 1:00 PM - 2:00 PM Pacific Time
Kai Axford, Security Specialist, Microsoft
How do you know whether your network is secure? And how do you know how to find out? This session is the first of a two-part series to help organizations plan and implement processes to identify vulnerabilities to network attacks. This first session shows how to plan your security assessment and how to gather information such that the methods and results fit your organization's needs. In this presentation we'll specifically show how to plan a security assessment and the details and processes for gathering network security information about your organization.
http://go.microsoft.com/fwlink/?LinkId=43762
TechNet Webcast: Threat Mitigation for Windows 98 and Windows NT 4.0 (Level 200)
Wednesday, April 20, 2005 - 9:00 AM - 10:30 AM Pacific Time
Harold Wong, Senior Technology Specialist, Microsoft
While migration to a newer platform is recommended, many customers have key business applications that will only run on legacy operating systems. This session offers prescriptive information and test plans for hardening legacy Windows clients and servers, with the goal of reducing the security risk factors for Windows NT and Windows 98 systems as much as possible. We also provide guidance on how to upgrade securely to newer operating systems.
http://go.microsoft.com/fwlink/?LinkId=43789
TechNet Webcast: Network Isolation Using Group Policy and IPSec (Part 3 of 3): Advanced Network Isolation Scenarios (Level 300)
Wednesday, April 20, 2005 - 11:00 AM - 12:00 PM Pacific Time
Matthew Hester, TechNet Presenter, Microsoft
This session is the final presentation of a three-part series about the information and tasks needed to implement data isolation using Group Policies and IPSec within an organization. The session describes several scenarios where you can use IPSec to enhance network security by using IPSec to create network isolation zones. This scenario-focused view of Group Policies and IPSec is based on Microsoft's prescriptive guidance.
http://go.microsoft.com/fwlink/?LinkId=43792
TechNet Webcast: Assessing Network Security (Part 2 of 2): Penetration Testing (Level 200)
Monday, April 25, 2005 - 1:00 PM - 2:00 PM Pacific Time
Kai Axford, Security Specialist, Microsoft
How do you know whether your network is secure? And how do you know how to find out? This session is the second of a two-part series on assessing network security, to help organizations plan and implement processes to identify vulnerabilities to network attacks. This second session shows how to implement penetration testing for intrusive network attacks, presents checklists that will help identify and remediate common issues, the tools and processes for scanning systems for vulnerabilities, and concludes with a case study where all these factors are put to work at a typical commercial enterprise.
http://go.microsoft.com/fwlink/?LinkId=43818
TechNet Webcast: Security Risk Management (Level 300)
Wednesday, April 27, 2005 - 9:00 AM - 10:30 AM Pacific Time
Kai Axford, Security Specialist, Microsoft
When establishing security for your network, you must take risk assessment, cost-benefit analysis, and implementation of security countermeasures into account. The Security Risk Management Guide, designed by Microsoft, can help your organization establish the ongoing process of security risk management. This 90-minute webcast presents a qualitative approach to risk management, tying in best practices from both the industry as well as the ones learned and formulated by the Microsoft internal IT Group.
http://go.microsoft.com/fwlink/?LinkId=43821
TechNet Webcast: Defense-in-Depth Against Malicious Software (Level 200)
Friday, April 29, 2005 - 11:00 AM - 12:30 PM Pacific Time</