Access "Microsoft security improving, while Trustworthy security lacks effort"
Microsoft's Mike Nash knows it's his ass if hackers make Swiss cheese of the forthcoming Windows Server 2003 and other future products. "A significant portion of that fleshy area will be gone," he jokes. Handpicked to head up the newly created Security Business Unit (SBU), Nash is ultimately responsible for ensuring the success of Trustworthy Computing, Microsoft's massive campaign to secure its existing software and harden future releases. "The vision of Trustworthy Computing is to deliver the same level of trust in our software as a public utility," says Nash, who has spent much of his nine years at Microsoft as a Windows marketing executive. "If you think about the service of a modern utility, you know you can depend on it. People's dependency on software is becoming like a modern utility and requires the same level of trustworthiness." In the year since Microsoft founder Bill Gates anointed Trustworthy Computing, the company has spent more than $100 million, retrained 11,000 software developers and engineers, scrubbed countless lines of code, and applied... Access >>>
Premium Content for Free.
Microsoft security improving, while Trustworthy security lacks effort
by Lawrence M. Walsh
Microsoft is making significant strides to clean up its security mess, but Trustworthy Computing still has a long way to go.
Microsoft's internal auditor discusses the company's IT security outlook
Scott Charney is Microsoft's internal auditor, see what he and his team control.
NetIQ's five-point security architecture
Even with expanded support and agents, NetIQ's SIM product remains a Windows-centric solution.
- Microsoft security improving, while Trustworthy security lacks effort by Lawrence M. Walsh
Microsoft Security Response Center revamps its patch processes
Microsoft Security Response Center revamps its advisory and patch processes.
Profile: Symantec CEO John Thompson
Symantec's CEO breaks business and cultural barriers in his drive to build a security superpower.
How to address enterprise IT security concerns with executives
Five tips to win friends and influence C-level execs in your organization.
- Microsoft Security Response Center revamps its patch processes
Next-generation security awareness training
by Andrew Briney
Put your posters and buttons away. A more effective solution is at your fingertips.
Hacking in 2003: Examining this year's hacking techniques
A look at the foibles, follies and felons of infosec in 2003.
Using HoneyD configurations to build honeypot systems
by Marcus J. Ranum, Contributor
Spoofing, diversion and obfuscation are all part of honeyd's powerful arsenal.
Detecting a Linux server hack
by Jay Beale, Contributor
Learn how to detect if your Linux server have been hacked or compromised.
Tips and tricks for IDS deployment best practices
by Jack Danahy, Contributor
Intrusion detection remains an over-hyped technology because most companies have no idea what to do with it.
- Next-generation security awareness training by Andrew Briney
More Premium Content Accessible For Free
Deploying data protection technologies properly requires a lot of time and patience. While most firms can get started by using preconfigured policies...
The bring your own device (BYOD) movement, which has flooded the enterprise with employee-owned smartphones, tablets, phablets and purse-sized ...
For so long penetration testing meant hiring an expert to use skill and savvy to try to infiltrate the company system. But, as with most ...