Home > Security News > For Microsoft, security and trust prove elusive
Security News:
EMAIL THIS

For Microsoft, security and trust prove elusive

By Sue Hildreth, contributor
15 Dec 2005 | SearchSecurity.com

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   

Microsoft took yet another step into the security market last month with the move to general beta testing of its OneCare Live antivirus and firewall product. The new offering, which is currently aimed at consumers, is an application and subscription service that provides AV scanning with automatic updates, firewall protection and storage backup for PCs.

OneCare Live comes on the heels of a series of other Microsoft moves in the security arena, including recent acquisitions of antivirus software maker GeCad Software, security software vendors Pelicon Security and Sybari Software, and GIANT Company's anti-spyware technology.

Over the past year or two, Microsoft also began beta-testing its desktop antispyware software and released an enterprise firewall and Web cache server, the Internet Security and Acceleration (ISA) Server. These and other signs suggest that the software giant wants in on the lucrative enterprise security and software services market, and OneCare may be the latest step in that quest.

But will consumers and organizations with a need for desktop security software flock to a Microsoft solution, given Microsoft's problems with security holes and constant patches for its flagship Windows operating system?

Some IT managers aren't so sure.

"If Windows is so exploitable, then just as someone can find loopholes in it, they're probably going to find a loophole in Microsoft's security product," said Bradley Dinerman, vice president of information technology for the Newton, Mass.-based IT consulting firm MIS Alliance, and the president of the New England Information Security Group, an organization of security professionals.

Microsoft's business strategy manager Samantha McManus noted that while all software products contain vulnerabilities, the vendor has committed significant human and financial resources to addressing security issues.

Many would agree that Microsoft gets a somewhat unfair rap for security problems simply because it has many high-profile products.

"I don't believe Windows is really any more or less secure than other operating systems, said Joshua Lutz, senior network analyst for a large Boston law firm. "Microsoft gets hit from the operating system side, from the Web server side, applications, and e-mail."

But, added Lutz, that doesn't mean he'd buy a Microsoft security product. "We hope to mitigate attacks by having multiple vendors. So, being a Windows shop on the back end, we get piece of mind from having non-Microsoft [security] products on the front line."

Dinerman agreed. "When it comes to security, I want a separation of powers," he said. "Windows provides all the functionality we need, but I want a separate party to conduct the audit of my security."

There's also the issue of migration in organizations that may have dozens, hundreds, or thousands of desktops running AV software. As Tom Kroll, network systems and security administrator for Hinshaw & Culbertson LLP, a Chicago law firm, notes,

"Any antivirus change would involve uninstalling our current vendor. I'd have to have a compelling reason to subject myself to that," Kroll said. "In addition, our user community knows our current antivirus software. If I make a change, I have to educate almost 1,000 people."

Microsoft is currently pushing OneCare Live at consumers, not the corporate market. That's good, say experts, as home users tend to automatically buy whatever Microsoft has to offer, while businesses often prefer best-of-breed, especially with security software.

Richi Jennings, analyst at Ferris Research, a San Francisco-based messaging and antivirus research firm, predicts home users will gravitate toward OneCare Live, to the detriment of vendors like Symantec and McAfee, which also sell to consumers.

"Right now OneCare is a separate product, but if they bundle it with Vista [Microsoft's next version of Windows], they could destroy that market like it did for disc fragmentation and PC faxing, by adding them to the operating system," says Jennings.

But, at least for the short term, Microsoft is not likely to steal any thunder from competitors selling security software to businesses. "Business people will be pretty circumspect about buying a Microsoft-branded security solution," notes Jennings. "They're not going to want to buy a security product from a company that has not been a security vendor."

Sue Hildreth is a Boston-based freelance writer specializing in enterprise software. She can be reached at Sue.Hildreth@comcast.net.

Tags: Software Development MethodologyClient securityNetwork Firewalls, Routers and SwitchesInformation Security Policies, Procedures and GuidelinesWindows Security: Alerts, Updates and Best PracticesVIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Software Development Methodology
Software piracy group offers cash to whistleblowers
Quiz: How to build secure applications
How to detect software tampering
Developers Need Help with Security Errors
Does an EULA make it truly illegal to decompile software?
SQL injection continues to trouble firms, lead to breaches
IBM acquires Ounce Labs for source code analysis
Microsoft issues emergency Active Template Library updates
Software security threats and employee awareness training
Adobe patches ColdFusion vulnerability blocking website attack

Client security
How to keep networks secure when deploying an 802.11n upgrade
InZero Systems launches hardware-based security gateway
DLP technology challenges security costs
Endpoint protection best practices manual: Combating issues, problems
Kaspersky update for SMBs in wake of free Microsoft Security Essentials
Microsoft makes free antivirus software widely available
Security best practices in hotels
Best Antimalware Products
Perimeter defense in the era of the perimeterless network
Microsoft Security Essentials (MSE) shows no vision, expert says

Network Firewalls, Routers and Switches
How to prepare for a secure network hardware upgrade
Best Network Firewall Products
What is the difference between static and dynamic network validation?
Screencast: Smoothwall offers firewall defense in lean times
New Cisco IOS bugs pose tempting targets, says Black Hat researcher
How to implement virtual firewalls in a complex network infrastructure
How to manage network bandwidth with distributed ISP bandwidth
Firewall rule management best practices
Should enterprises be running multiple firewalls?
What are the disadvantages of proxy-based firewalls?

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
bypass  (SearchSecurity.com)
Common Weakness Enumeration  (SearchSecurity.com)
debugging  (SearchSoftwareQuality.com)
fuzz testing  (SearchSecurity.com)
heuristics  (SearchSoftwareQuality.com)
sandbox  (SearchSecurity.com)
threat modeling  (SearchSecurity.com)
trigraph  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



More Tips to Secure Your Network
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts