Security vendors still waiting to hear from Microsoft on PatchGuard
Despite Microsoft pledge, McAfee, Symantec say software vendor mum on specifics
Computerworld - Despite its public statements, Microsoft Corp. so far has not given security vendors any specifics on its plans to release code that will allow them to work around a kernel protection technology called PatchGuard in the upcoming Vista operating system.
Even if Microsoft eventually releases such code, it's likely to be too little, too late, according to executives at several computer security companies.
The issue is important for enterprises because many relatively advanced functions that are available in third-party security products are likely to be crippled in a 64-bit Vista environment unless the issue is resolved or vendors find a way to bypass PatchGuard.
PatchGuard has been at the center of a simmering dispute between Microsoft and several security vendors, most notably Symantec Corp. and McAfee Inc. Microsoft maintains that PatchGuard would increase operating system reliability by protecting the Vista kernel from unauthorized modification by third parties, including security vendors and malicious attackers.
But vendors such as Symantec and McAfee argue that PatchGuard would prevent them from delivering certain key functions in their products. This includes capabilities such as behavior-based virus detection, host-based intrusion prevention and software tamper protection, all of which work by making modifications to the operating system kernel.
Last week, in an apparent bid to assuage broader antitrust concerns related to Vista in the European Union, Microsoft announced that it would make security application programming interfaces (API) available that would let vendors get around PatchGuard.
In an interview with Computerworld earlier this week, Stephen Toulouse, senior product manager in Microsoft's security technology unit, said that the company was "accelerating its decision" regarding extensions to the Vista kernel.
"What we are doing right now is sitting down with vendors and getting specifications" for kernel-related APIs. Toulouse said. The APIs will allow vendors to deliver the same kind of security functions they have been delivering, while still preventing kernel modifications, he said. Such APIs will be developed in "combination with" independent software vendors over the next several months, with the first set of APIs likely to be available with Service Pack 1 for Vista, he said.
But so far at least, none of those discussions has involved APIs related to PatchGuard, said George Heron, chief scientist at McAfee. Contrary to what Microsoft has said publicly, "we haven't received any information at all regarding PatchGuard," Heron said. "We have no idea what APIs they are speaking of with respect to PatchGuard," nor has there been any official notice on when they might become available, he said.
With Vista scheduled to start shipping sometime later this year, "it is not really fair for Microsoft to wait until the eleventh hour" to release APIs, because vendors need time to modify their products, Heron said.
- 7 Elements of Radically Simple OS Migration OS migration is typically time-consuming and expensive. To make your next migration easy, follow these six recommendations when planning your project.
- Flying High on the Use of Red Hat Enterprise Linux Flybe was one of the 21 companies that were interviewed for quantitative results on their operations as part of an IDC ROI analysis....
- Who does NSS Labs "Recommend" for NGFW? In 2012, NSS Labs found that most available NGFW solutions "fell short in performance and security effectiveness." In 2013 NSS Labs noted "marked...
- 9 Essentials for a Complete Cloud-to-Cloud Backup Solution In 9 Essentials for a Complete Cloud-to-Cloud Backup Solution, we'll walk you through potential sources of data loss in the cloud and provide...
- Protecting Critical SaaS Data Before It's Too Late In this webinar, you'll hear how to avoid SaaS data loss through best practices from a panel of experts.
- What Does it Take to Deliver a Superior Customer Experience? The Two Top-Rated Online Retailers, B&H Photo and Crutchfield Electronics, Share Their Secrets Discuss practical CX tools and service methods such as contact center agents and the use of realtime speech analytics to help contact center... All Operating Systems White Papers | Webcasts