Microsoft Says Security Emphasis is Paradigm Shift -- Redmondmag.com

Microsoft Says Security Emphasis is Paradigm Shift

Security remains a hot-button issue for Microsoft, as Brian Valentine, senior vice president for Windows, touted Redmond's new “hard" approach to software development.

By Matt Migliore
10/19/2002

According to Valentine, who was a keynote speaker at Windows Server Devcon in Seattle earlier this month, Microsoft has done everything it can to make sure its new server operating system, Windows .NET Server 2003, doesn’t fall victim to the same security holes that have plagued the product in the past. During his keynote, Valentine said .NET Server represents a paradigm shift for Microsoft, in that it was “engineered for security.”

With previous versions of Windows Server, Valentine said security wasn’t a primary concern. “Originally, the focus was getting people on the network, not keeping people off it.”

But, after a number of security holes in Microsoft’s popular IIS Web-serving software were exposed by worms and hit by virus attacks, Valentine said Redmond realized it needed to reassess its security strategy.

Still, Valentine was quick to point out that Microsoft isn’t the only reason for security lapses within the enterprise. Citing a recent analyst report, Valentine said the Microsoft platform was no worse than leading Linux or Unix systems in terms of security flaws. “We all suck,” he said.

Valentine said a long-term, industry-wide commitment is required in order to limit security breaches in IT. “[Security] is not something just Microsoft can solve,” he said. “There’s no end point to this problem. It’s an issue we all have to tackle.”

[An unabridged version of this article appeared in ENTmag.com News on Sept. 5, 2002, at http://www.entmag.com/news/article.asp?EditorialsID=5499.—Editor)

About the Author

Matt Migliore is regular contributor to ENTmag.com. He focuses particularly on Microsoft .NET and other Web services technologies. Matt was the editor of several technology-related Web publications and electronic newsletters, including Web Services Report, ASP insights and MIDRANGE Systems.

Featured

Using Configuration Files to Control PowerShell Scripts, Part 2: Building Blocks

Learn how to use PowerShell's GUI capabilities to dynamically create configuration files that enhance script flexibility and usability.
U.S. House Leaders Unveil Bipartisan Strategy for AI Governance and Innovation

On Tuesday, U.S. House Speaker Mike Johnson and Democratic Leader Hakeem Jeffries received the final report from the bipartisan House Task Force on Artificial Intelligence, which outlines essential principles and recommendations to bolster American leadership in AI.
Using Configuration Files to Control PowerShell Scripts, Part 1: The Basics

Learn how to use JSON configuration files to make PowerShell scripts more dynamic, flexible and user-friendly.
Exchange Online Receiving Enhanced Message Trace

Microsoft has announced the public preview of its enhanced Message Trace feature in the Exchange admin center (EAC) for Exchange Online.
Major Microsoft Multifactor Authentication Vulnerability Revealed

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.