PDA

View Full Version : Microsoft Reveals Internal Security Techniques



Joshua
12-03-2003, 12:07 PM
During a little-publicized security Webcast Monday, Microsoft
revealed that attackers subject the company to 2500 to 3000 electronic
attacks every day--or almost 100,000 a month. Despite the massive
number of attacks, the last successful intrusion occurred more than 3
years ago during the infamous October 2000 security breach. But the
software giant says the company's biggest security risk isn't external
electronic attacks of its Web and external network properties; the
biggest risk is Microsoft's huge fleet of mobile workers and
partners--some 60,000 strong--who access the company's 175 remote
Access Points (APs) on a regular basis.
"We've taken a deep look inside Microsoft to see how we can improve
security at every level," Mike Nash, corporate vice president of
Microsoft's Security Business Unit, said during the Webcast. "A lot of
the technology we use [at] Microsoft applies directly to [customers']
work."
Microsoft revealed some other interesting statistics during the
Webcast. For example, the company uses Computer Associates' eTrust
security-management suite to secure its networks and two-factor
authentication (i.e., user name/password and smart card) to better
secure its intellectual property.
To view this and other security Webcasts, visit the URL below. The
aforementioned Webcast is titled "ShopTalk: IT Security Webcast" and
first aired on December 1.
http://www.microsoft.com/technet/security/webcasts/default.asp

ribitch
12-03-2003, 03:29 PM
what what are they considering an attack? Pinging microsoft.com? The presented numbers are high, but the type and strength of the attack is what matters.

jase71
12-03-2003, 04:33 PM
I wonder what percentage of those attacks ever hit a Microsoft-OS server.

Any request to www.microsoft.com actually is directed to Akamai, an internet caching system Microsoft uses to protect itself from DOS attacks. Akamai uses Linux for its systems. So www.microsoft.com is actually being served to you by a Linux machine...

Would be nice to see a better break down of the attacks, and what system specifically was being attacked...