Skip the navigation

Microsoft plans security boost for Windows

By Jaikumar Vijayan
April 11, 2001 12:00 PM ET

Computerworld - Microsoft Corp. wants to make Windows a much safer operating environment.

The software giant yesterday announced plans to integrate new technology into upcoming versions of Windows that it claims will dramatically improve the security capabilities of the popular operating system.

But users will have to wait until Windows XP and the next version of the Windows Server product, code-named "Whistler," ships to see the technology.

Microsoft also announced a new internal program called the Secure Windows Initiative that will provide Microsoft engineers with ongoing education, tools, security-focused development processes and rigorous internal and external testing to ensure higher attention to security, according to the company.

"This is Microsoft declaring war on hostile code," said Scott Culp, a security program manager at the company.

On the technology front, Microsoft is integrating new software restriction polices in upcoming versions of Windows that will let systems administrators to specify applications that are permitted to run on Windows while barring other applications.

For instance, an administrator can set policies that allow only applications such as Word and Excel to run.

The technology will look for specific markers including file size and signed integrity credentials before allowing applications to run, so hackers won't be able to overwrite approved applications with malicious code, Culp said.

"It is a good, solid barrier against letting anything but trusted code ... run on a user's machine," he said.

The technology is designed to track and stop hostile code like the I Love You and Anna Kournikova viruses, while allowing administrator-approved code to run.

Microsoft is also adding a new security layer as part of the Common Language Runtime environment, which manages the execution of code on Microsoft's .Net framework. The technology will let administrators define limits on the kinds of applications and services that can be accessed by another application. For example, an administrator can define a policy that allows an application to access the contents of a specific database, while denying access to the contents of another database.

Technologies such as these apparently build on Microsoft's ongoing efforts to shore up Windows security. That effort began in earnest with the release of Microsoft's Outlook security update last year. The update bans certain types of e-mail attachments from getting through to users' computers, Culp said.

"We are going from coarseness to fineness," he said. "The security update was the most coarse protection scheme.... There are going to be additional levels of protection that you are going to see in Whistler and XP," he said.



Related stories:

Read more about Operating Systems in Computerworld's Operating Systems Topic Center.



Additional Resources
Forrester Consulting - Optimizing Users and Applications in a Mobile World
WHITE PAPER
Solving application issues over the WAN requires careful consideration. Based on their independent research, Forrester Consulting offers recommendations on how to tackle application performance issues, insufficient bandwidth and the inability to quickly restore users in a disaster.

Read now.

Security KnowledgeVault
WHITE PAPER
Security is not an option. This KnowledgeVault Series offers professional advice how to be proactive in the fight against cybercrimes and multi-layered security threats; how to adopt a holistic approach to protecting and managing data; and how to hire a qualified security assessor. Make security your Number 1 priority.

Read now.

Cut Communications Costs Once and for All
WHITE PAPER
New IP-based communications systems are being deployed by small and midsized businesses at a rapid rate. Learn how these organizations are enabling faster responsiveness, creating better customer experiences, speeding office or mobile interactions, and dramatically reducing existing communications costs.

Read now.

Operating Systems White Papers
VMware View Optimization Guide for Windows 7
This document provides guidelines for configuring a standard Windows 7 image to be used within a VMware View™ environment, providing administrators with the...
Watson - A System Designed for Answers. The future of workload optimized systems design
Watson is a workload optimized system designed for complex analytics, made possible by integrating massively parallel POWER7 processors and DeepQA technology. Read the...
Overcome Top 7 Admin Challenges of Active Directory
As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
Insiders Can Ruin Your Company. Take Action.
Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
Top Solutions and Tools to Prevent Devastating Malware
Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
All Operating Systems White Papers
Operating Systems Webcasts
Optimizing Networks for the Cloud
Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn...
Virtualize Business-Critical Applications with Confidence
Virtualizing business-critical applications has become a key focus for organizations as they move along their virtualization journey. With the launch of VMware vSphere®...
All Operating Systems Webcasts
Newsletter Sign-Up

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all newsletters | Privacy Policy
IT Jobs