🚀 go-pugleaf

The speaker this month is Jeff Schmidt, the topic is NT security.  

Jeff is a senior here at Ohio State double majoring in Computer
Engineering and Mathematics.  He was employed by Microsoft Corp. as an
Intern where he worked with Windows NT Security and is headed back
there again this summer to work on the same.

Jeff currently holds a staff position as a Systems Developer/Engineer
with the Department of Extension here at OSU.

Jeff says: I expect many non-NT people so I'll gear the talk
appropriately. 

   I. Windows NT Design - an OS designed with security in mind
     1. High level NT organization
     2. NT Domain model
  II. Security implementation in NT
     1. Tokens, ACLs, Descriptors
     2. Logs and Audit
 III. Authentication
     1. NTLM Challenge/Response
     2. LanManager
     3. The recent issues: SAM permissions, PWDump, NTCrack, Crack 5.0
     4. Kerberos is in the future!
  IV. Network Security
     1. VPNs (PPTP)
   V. Security at an API level (brief)
  VI. ActiveX, IE3, IIS (very briefly because they've been beaten to death
      already!)
 VII. 3rd party tools
VIII. Q & A

The meeting this month is April 23, 4-6 PM in 120 Baker Systems
Engineering on the OSU main campus.  If you need directions, let me
know. 

The Network Security Group meetings are usually held on the fourth
Wednesday of each month from 4-6 PM on the Ohio State University main
campus in Columbus (usually in Baker Systems 120).  The goal of our
meetings is to share information about computer security tools,
practices and problems.  Anyone and everyone are invited to attend.

We also have mailing lists for people who are interested in discussing
network security issues, or who just want announcements about meetings
and security bulletins.  Send mail to
netwog-security-request@lists.net.ohio-state.edu for more information. 

--- Steve