"At Microsoft, we're investing heavily in security because we want customers to be able to trust their computing experiences, so they can realize the full benefits of the interconnected world we live in," said Ballmer. "With the continuing onslaught of malware, viruses, phishing attacks and other kinds of Internet fraud, creating a more secure computing environment requires a concerted, long-term effort on the part of all technology companies, as well as customers and governments."
Microsoft said it has taken a multi-pronged approach to security, with efforts to better secure its platform in three key areas: making the right technology investments, providing customers with clear prescriptive guidance, and partnering closely with the security industry, governments and law enforcement.
"Customers are telling us what our research shows: the nature and complexity of online threats and attacks are continuing to evolve, and hackers, thieves and pirates are getting more sophisticated," said Nash. "At Microsoft, we believe customers have the right to know what software is running on their machine, how it got there, its purpose and how to remove it if necessary. To help our customers combat the evolving threats and to have those rights protected, we are taking a holistic approach to security that includes developing new technology, partnering with the industry, and keeping customers as educated as possible about how to stay ahead of the latest threats facing them."
In order to help customers mitigate their security risk, Microsoft said it would ensure the highest degree of quality in its software, deliver new security technology innovations in the Windows platform and develop security products and services that will evolve to meet future security needs.
- Fundamentals: Microsoft seeks to provide a built-in level of safety and security in computers and software. This includes improvements to the security of software code through the Engineering Excellence initiative and investments in technologies that help keep software updated and more secure throughout its life cycle.
- Threat and vulnerability mitigation: The company's aim is to offer integrated security technologies that provide defense-in-depth protection against threats and vulnerabilities, giving customers more central visibility and better control of the security environment.
- Identity and access control: Microsoft's objective is to provide technologies that allow legitimate users to retrieve information while making it more difficult for unauthorized users to gain access to resources. These include technologies that verify user identity, control what resources users are allowed to access based on policy, allow management of such users over time and better protect access to data throughout its life cycle.
Microsoft Client Protection will help protect business desktops, laptops and file servers by providing unified protection against emerging threats such as spyware and rootkits, as well as viruses and other traditional attacks.
"We have heard from business customers that they want protection from viruses, spyware and other malware threats with a single solution. Backed by a global research system, Microsoft Client Protection will address this need with one solution that combines proven protection technology with integrated management and reporting capabilities," said Nash.
The solution's integrated management console puts IT professionals in control of their environment, while prioritized reports and alerts help focus resources on critical issues. Microsoft Client Protection will integrate with existing IT infrastructure, such as Active Directory and existing software distribution systems, helping to reduce deployment time and maximize value. The product is currently in development and Microsoft plans to make an early beta of the product available to select customers later this year.
Microsoft has also announced plans to release Microsoft Antigen, anti-virus and anti-spam security software for messaging and collaboration servers based on the technology from recently acquired Sybari Software Inc. The company said it would add its own anti-virus scan engine to Microsoft Antigen. In addition, Microsoft Antigen for Exchange recently completed Microsoft's Security Development Lifecycle review process, which has been shown to achieve measurably improved levels of security for Microsoft software solutions. Microsoft Antigen for Exchange is expected to be available in beta to customers in the first half of 2006.
Microsoft announced that it is collaborating with security partners, law enforcement and policymakers in the industry. The SecureIT Alliance is a group of security partners that are working together to develop security solutions for the Microsoft platform. The alliance expands the security and Internet safety partnerships Microsoft has with other industry leaders and governments, including the Virus Information Alliance and the Global Infrastructure Alliance for Internet Safety.
This is cache, read story here
