Improving Web Application Security: Threats and - CGISecurity

How To: Secure Your Developer Workstation 7692. Run MBSA by double-clicking the desktop icon or selecting it from thePrograms menu.3. Click Scan a computer. MBSA defaults to the local computer.4. Clear all check boxes except for Check for security updates. This option detectswhich patches and updates are missing.5. Click Start scan. Your server is now analyzed. When the scan completes, MBSAdisplays a security report, which it also writes to the%Userprofile%\SecurityScans directory.6. Download and install the missing updates. Click Result details next to each failedcheck to view the list of missing security updates.The resulting dialog box displays the Microsoft security bulletin reference number.Click the reference to find out more about the bulletin and to download theupdate.For more information about using MBSA, see “How To: Use Microsoft BaselineSecurity Analyzer (MBSA),” in the How To section of this guide.Note MBSA will not indicate required .NET Framework updates and patches. Browse the .NETFramework downloads page at http://msdn.microsoft.com/netframework/downloads/default.asp.Using Automatic UpdatesThe Automatic Updates feature offers the easiest method to update your operatingsystem with the latest critical security patches. The feature is built into Windows XPand is installed with Windows 2000 Service Pack 3.To configure Automatic Updates with Windows 2000, click Automatic Updates in theControl Panel. For more information about Automatic Updates and Windows 2000,see Microsoft Knowledge Base article 327850, “How To: Configure and UseAutomatic Updates in Windows 2000.” To configure Automatic Updates with Windows XP1. Right-click the My Computer icon on the desktop or the System icon in ControlPanel.2. Click System Properties.For more information about Automatic Updates and Windows XP, see MicrosoftKnowledge Base article, 306525, “How To: Configure and Use Automatic Updatesin Windows XP.”