David LeBlanc

David LeBlanc is a senior technologist for Microsoft's network security group and is a member of Mitre's Common Vulnerabilities and Exposures editorial board. He has more than five years of Windows NT experience.
Email:dleblanc@mindspring.com

My Latest Articles
My Latest Comments

Author Articles

July, 2001
Network Security Auditing
The most important factor in your overall network security is how well you manage the network. Even well-built, well-managed systems, however, are vulnerable to ever-new security risks, so running one or more network security auditing tools is essential.
Windows IT Pro

February, 2001
Restricting Processes
David LeBlanc shares some code to help you control the access levels that a process uses in Windows 2000.
Windows IT Pro

November, 2000
Detecting Alternate Data Streams
Alternate data streams occasionally crop up as security concerns because an attacker might use these streams to hide files. Find out how you can track down these data streams so that you can protect your systems.
Windows IT Pro

October, 2000
Understanding Process Tokens
Learn how process tokens work, and find out about a piece of code that can expose the information within these tokens to help you debug your code.
Windows IT Pro

October, 2000
Defeating Denial of Service – CPU Starvation Attacks
This week, David tells you how to protect yourself from CPU starvation attacks, where an attacker leverages your mistakes to cause your system to consume all available processing resources.
Windows IT Pro

September, 2000
Defeating Denial of Service Attacks
Learn how attackers attempt to starve the resources associated with your application and how to protect yourself from these types of Denial of Service attacks.
Windows IT Pro

September, 2000
Structured Exception Handling and Security
Learn how to use the structured exception handling (SEH) function that comes with the Win32 API to let C code handle errors in your application in much the same way that C++ handles exceptions.
Windows IT Pro

August, 2000
Setting Security, Part 2
In Part 2 of his series on Setting Security, David LeBlanc presents an application you can use to initialize the discretionary access control list on a Registry key to give Administrators full control, making your applications more secure.
Windows IT Pro

August, 2000
Setting Security
If your information is the least bit sensitive, inherited security permissions typically won’t be appropriate for your needs. Learn how to create and apply an ACL to protect your sensitive data.
Windows IT Pro

July, 2000
Controlling Socket Connections
When you're dealing with sockets and other network connections, you want to be selective about which hosts you accept connections from.
Windows IT Pro

June, 2000
Secure Services
Securing services is important to overall network security. Programmers need to be aware of the user context that a service will use and be careful when deciding which choice is right for each service.
Windows IT Pro

June, 2000
Bind Basics

Windows IT Pro

May, 2000
Parsing POP

Windows IT Pro

May, 2000
Writing a Secure POP3 Server

Windows IT Pro

April, 2000
Overflowing Buffers

Windows IT Pro

April, 2000
Avoiding Buffer Overruns with String Safety

Windows IT Pro

March, 2000
Good Programming and the Rules for Writing Secure Code

Windows IT Pro

August, 1999
Securing Custom Applications
Many software companies don't design programs with high security in mind. Protect your self by examining your system very carefully before, during, and after installing new software products.
Windows IT Pro

August, 1999
Where NT Stores Passwords
Learn about where NT stores passwords and how to protect your system.
Windows IT Pro

August, 1999
BackOffice Security
Prevent unwanted access by being aware of where passwords are stored on your system.
Windows IT Pro

GOOGLE LINKS
SPONSORED LINKS
FEATURED LINKS

eBooks

Playbook for a Virtualized Datacenter | During challenging times, optimizing the IT infrastructure becomes imperative. Many organizations are looking to extend their virtualization efforts to encompass the entire datacenter. Get a step-through of your technology options and more.

White Papers

As the advances in USB devices have made them invaluable to most business users’, they have also exposed organizations to enormous risks. Learn how to easily enforce device/port control and data encryption policies without requiring new infrastructure and additional admin overhead.

WEB SEMINARS

Is Flexible Lockdown Possible? Join Darren Mar-Elia for this free web webinar exploring the various methods you should consider to protect and control your desktops while also understanding the impact on the end user community.
View Seminar On-Demand.

eLearning Series

Windows IT Pro brings the experts direct to you to share their real-world perspective, experience, and expertise. During each event, three sessions stream in real time, allowing you to learn, to ask questions, and to get solutions.
Upcoming event: SQL Server Consolidation

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.