• subscribe


Mark Burnett

Mark Burnett (mburnett@xato.net) is an independent consultant specializing in Windows security. He is a Security MVP and the author of several books, including Perfect Passwords and Hacking the Code (Syngress). Visit Mark’s blog at xato.net.
Email: mburnett@xato.net

My Latest Content
My Latest Comments



Author Articles

Securing Hyper-V

By Mark Burnett, 02/01/2009

Hyper-V introduces some unique security risks that you should address to prevent the host machine and guest OSs from being compromised.

Secure Your DNS Servers

By Mark Burnett, 11/21/2008

DNS has been around forever, so it can be easy to forget how vital a properly configured DNS server is for stopping DoS and other attacks. A few steps can secure your DNS ...

Microsoft DNS vs. BIND

By Mark Burnett, 11/21/2008

A comparison of the merits of Microsoft DNS and BIND for security.

Tips for Securing WordPress

By Mark Burnett, 05/08/2008

A hacked blog can be a PR nightmare. Stop it from happening to you by taking some precautions: Use SSL for administration, and set correct permissions.

15 Tips for VMware Security

By Mark Burnett, 11/01/2007

Protect your virtual machine host and guests by isolating them from the rest of your network and each other.

NTFS Secrets

By Mark Burnett, 06/07/2007

Seven nuggets of information about how the Windows file system actually works in practice will save you time and frustration when working with file permissions.

Bounce Unwanted Files Out of Your Folders

By Mark Burnett, 03/15/2007

A new file screening tool in the Windows 2003 R2 File Server Resource Manager toolset lets you block certain files or file types from entering a folder or notify an administrator ...

Windows Firewall Auditing

By Mark Burnett, 02/08/2007

Regularly auditing the firewall configuration settings for the systems you manage keeps accumulated misconfigurations from compromising your protection. A useful script lets you ...

DNS Annoyances

By Mark Burnett, 01/30/2007

Get a handle on DNS annoyances--small but irritating problems that can affect the performance of your network--and use DNS to its full potential.

More DNS Tips

By Mark Burnett, 01/30/2007

Besides just plain DNS annoyances, we have some great tips for working with DNS.

Hardening Service Applications

By Mark Burnett, 11/20/2006

Harden third-party software and reduce your security risk—create a user account for your software application to run on and grant it only the privileges necessary to do its job.

How I Secured One Company's Network

By Mark Burnett, 09/18/2006

Here's one way to secure a network while maintaining usability—using virtual machines, a virtual network, and Log Parser, and preinstalling common ActiveX components.

Segregate Your DNS Servers

By Mark Burnett, 08/29/2006

The key to effective DNS design in the enterprise is to segregate DNS servers into distinct roles. Here's how to set it up.

DNS Threats

By Mark Burnett, 08/29/2006

Learn about the most common threats that plague typical DNS infrastructures.

A Real-World Network Makeover

By Mark Burnett, 12/27/2005

Thinking of a complete network makeover? This article walks you through the process at a wireless ISP called UtahWISP.

Use Guest Accounts to Fight Malware

By Mark Burnett, 11/21/2005

Make Guest accounts a part of your least-privilege strategy, to reduce exposure to malware attacks through vulnerable applications such as Web browsers and email.

Update Management for SMBs

By Mark Burnett, 09/20/2005

Despite access to WSUS and third-party patch management solutions, many small and midsized businesses haven't implemented an update management plan. Here's a ready-made plan that ...

Tips for Tightening User Account Security

By Mark Burnett, 02/15/2005

User authentication is the foundation of the Windows security mechanism. Take these simple steps to tighten your user accounts.

Setting Up Network Access Quarantine Control

By Mark Burnett, 01/18/2005

Find out how to use Windows 2003's Network Access Quarantine Control to prevent noncompliant systems from connecting to your network.

Tips for Securing IIS

By Mark Burnett, 12/20/2004

Use these best practices to make your IIS servers more resistant to attack.