Programs provide additional guidance, can shorten response times and increase industry collaboration against online threats.
LAS VEGAS, Aug. 5 /PRNewswire-FirstCall/ -- At the Black Hat USA 2008
conference today, Microsoft Corp. introduced security-related programs that
share early information with partners to help them protect customers quickly
and effectively. The new programs also provide additional information and
guidance to help customers evaluate risks and prioritize the deployment of
Microsoft security updates.
(Logo: http://www.newscom.com/cgi-bin/prnh/20000822/MSFTLOGO)
Along with the predictability of Microsoft's monthly security update
process is the emergence of an undesirable cycle - the release of exploit
code, related to those updates, sometimes within hours of release.
Understanding this changing threat environment, Microsoft will offer the
Microsoft Active Protections Program (MAPP), which gives security software
providers advance information about vulnerabilities addressed by Microsoft
security updates. This will allow security software providers to offer
protections to customers quickly and effectively.
In addition, as part of the company's ongoing effort to improve its
guidance for customers, Microsoft announced its new Exploitability Index.
Developed based on customer feedback, the Exploitability Index will provide
customers with guidance on the likelihood of functional exploits being
developed for vulnerabilities addressed by Microsoft security updates. This
additional information helps customers better assess their unique risks and
better prioritize deployment of the monthly security update. The
Exploitability Index will be included as part of Microsoft's monthly security
bulletin release.
'The introduction of these new programs helps address evolving online
threats and provides more practical guidance to assess and manage risk,' said
Andrew Cushman, director of security response and outreach at Microsoft. 'In
the race between exploit and protection, Microsoft is committed to shifting
the advantage to the security industry. The Microsoft Active Protections
Program gives security software providers the information and resources they
need to help better protect customers.'
By investing in technology innovations, industry partnerships and customer
guidance, Microsoft continues to seek ways to put organizations in control of
their computing environments and help address online security.
'As security threats become more sophisticated, the global security
community must combine its resources and work together to provide maximum
security protections to worldwide Internet users,' said George Stathakopoulos,
general manager of security engineering and communications at Microsoft. 'No
one organization can counter online attacks alone. Therefore, we must use the
combined strength of the industry, partners, customers and public
organizations to build a more secure environment for everyone.'
Founded in 1975, Microsoft (Nasdaq: MSFT) is the worldwide leader in
software, services and solutions that help people and businesses realize their
full potential.
SOURCE Microsoft Corp.