Microsoft simplifies patching

By Matt Whipp

Posted on 15 Apr 2003 at 17:42

Microsoft has outlined its security roadmap that should satisfy those experts that put security. in a recent survey, as their prime concern with Microsoft's products.

Speaking at the RSA Conference, Microsoft's Mike Nash, of the Security Business Unit, outlined four areas where the company would be pursuing its Trustworthy Computing drive.

'Customers have told us that making trustworthy computing a reality will require greater simplicity and higher predictability when it comes to security,' he said.

The survey, by Forrester Research, found that 74 per cent of IT security experts put security as their top worry with Microsoft products and concluded with a number of recommendations.

It looks like many of them will be met. First, it is to reduce the number and variety of patching mechanisms used for its products. The automated update and patching tools currently employed for the Windows platform will be extended to include other Microsoft products within the year.

The service will also be made more sophisticated, allowing the timing of updates for scheduled downtime. An improved Baseline Security Analyser will also be available by the end of year to make it easy to identify unpatched systems.

With Windows Server 2003, Microsoft will introduce Windows Rights Management Services, which attaches privileges to documents that remain with them no matter where they end up - so authors can predetermine whether documents can be printed, edited or emailed, for example.

Next week's release of Visual Studio .Net 2003 and the .Net Framework 1.1 will give sys admins greater control in locking Web services and applications, claims Microsoft.

On a more general note, its adoption of the latest WiFi protected access (WPA) wireless security protocol highlights its drive towards secure network access, claims Nash.

Microsoft is also looking outside itself in its bid for security, setting up the Trusted Security Group along with the likes of IBM and Intel. Authoring books on secure practices, offering technical workshops and university courses are other ways that the company is tackling the issue from a broader perspective.

See also:

Three quarters of IT security experts distrust Microsoft security