Advertisement
Promo

Security threats Toolkit

'We have a lot more work to do' - Microsoft

Patrick Gray ZDNet Australia

Published: 14 Aug 2003 09:05 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The head of Microsoft’s Trustworthy Computing initiative, Scott Charney, says the Windows vulnerability on which the MSBlast worm is based is a sign the software heavyweight has "a lot more work to do".

Click here for details on protecting your PC.

During an interview with ZDNet Australia, Charney said he was disappointed when the software bug, which affected Windows Server 2003, touted as the most secure Microsoft operating system ever, was unearthed.

"We have always said that Windows Server 2003 would not be bullet-proof," he said. "It’s disappointing. Is it surprising? No… it just means we have a lot more work to do."

Disappointment seems an appropriate reaction -- the company spent $200m (£125m) in an attempt to secure Windows Server 2003 by standing down 8,500 developers for security training.

However, the security boss defended Microsoft's product security and said the company’s products have a disproportionately bad reputation.

"To some extent Windows is as secure, if not more secure, than many other systems, but the fact of the matter is we have [overwhelming] market share and with that comes increased responsibility," he told ZDNet Australia . "Even if we’re doing better than everyone else, that's great, but we have to do better still."

"Software's complex and it's not likely we'll get the number of bugs to zero but we have to do a better job than we've done to date," he added.

As for the threat of a "cyber terrorism" attack, Charney says there's a lot of hype out there.

"As difficult and as problematic as an event like Slammer might be, it doesn't compare to the World Trade Center [attacks]… If you’re trying to provoke terror the Internet may not be the best medium for that."

The real threat, he said, will come from a blended, co-ordinated threat, for example an attack on telephone infrastructure prior to a physical attack -- like the World Trade Center disaster -- and would be intended to disrupt emergency response capabilities.

"I think many of us in the field are concerned about the fact that a more co-ordinated terrorist attack could be the problem."

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
89 out of 137 people found this useful


Company/Topic Alerts

Create a new alert from the list below:



Video icon

Video

Sentry Posts Blog

This Crap Site

How utterly stupid - I am ranked #40 in the top 100 - as a member of this site..... I mean HOW utterly stupid.... I have done sweet FA, I have only rejoined this site after a 3 or... More

Post a comment

Microsoft Security Update: November Pa...

Apologies for this late update to our core Patch Tuesday update. Here is a summary of the update .... The November Patch Tuesday update from Microsoft follows the largest patch and... More

Post a comment

DNA details of innocent will be kept f...

The government has announced that it plans to keep innocent people's DNA details for up to six years. In response to a consultation it launched last December, the government said... More

4 comments


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters