Microsoft research labs are working on a new technique, code-named Shield.
Software patching has not been an effective first-line defense preventing large-scale worm attacks, even when patches had long been available for their corresponding vulnerabilities.

Shield uses a shielding process that precedes the patching process. This will cover the critical time window between the vulnerability disclosure and patch application, when more than 90% of the attacks take place today.

View: Microsoft researching a new first-line worm defense Article
News source: Aviran's Place


Thanks to daveS of the forums for this submission!



There are 13 additional comments
Advertisement
Quote this comment Reply to this comment #1 Posted by chorpeac on 19 Oct 2004 - 15:02
interesting, I will have to keep my eye on this to see where it goes.
(2 replies) Quote this comment Reply to this comment #2 Posted by cork1958 on 19 Oct 2004 - 15:15
What's going to guard against the shield being exploited and how long will it take to patch/update that? Sounds like a circle jerk to me!
Quote this comment #2.1 Posted by Varsity on 19 Oct 2004 - 15:37
It's a lot easier to keep one app, Shield, up to date than all the ones it protects.
Quote this comment #2.2 Posted by noyb on 19 Oct 2004 - 15:39
I think before long MS might consider turning the automatic updates default switch to the ON position, this doesn't sound like something we will be getting any time soon.
(5 replies) Quote this comment Reply to this comment #3 Posted by slapnuts_ox on 19 Oct 2004 - 16:23
i got an idea.....how about MS just write the OS to be secure in the first place rather than patch this and patch that.
Quote this comment #3.1 Posted by Varsity on 19 Oct 2004 - 16:35
Because it is 'insecure' through it's popularity and large target size.
Quote this comment #3.2 Posted by noyb on 19 Oct 2004 - 16:41
I won't deny thats a very large part of it but from what i have read up on its not the only factor by a long shot.
Quote this comment #3.3 Posted by slapnuts_ox on 19 Oct 2004 - 16:45
that is only partially true. MS has had to maintain application compatibility with a lot of broken and unsecurly designed things they made which has made windows remain unsecure. Do i even need to bring up activex? basically MS needs to just break full windows compatibility and release a new OS with a new set of secure protocols rather than try and patch a broken system. Apple did this with OS X and included OS 9s ability to run for legacy app support till everything was moved over and Microsoft really needs to do the same with longhorn.
Quote this comment #3.4 Posted by amdme3200 on 19 Oct 2004 - 19:31
And why cant ppl like you keep your stupid mouth shut?
Quote this comment #3.5 Posted by markjensen on 19 Oct 2004 - 19:35
Actually, it isn't the market share that makes it a problem.

Is the the multitude of security-ignorant users who do things like:
* Run with Administrator priveleges
* Neglect to keep updated daily (or monthly, or however often updates come out now)
* Open attachments they should not

Security is not tied to market share.
(1 reply) Quote this comment Reply to this comment #4 Posted by cjrciadt on 19 Oct 2004 - 16:48
Worm alert raise shields! All i need are some phasers to lock on with.
Quote this comment #4.1 Posted by rogerroger on 19 Oct 2004 - 17:10
LOL. Phasers to kill! The Klingons are coming, the Klingons are coming!
Quote this comment Reply to this comment #5 Posted by Rudy on 19 Oct 2004 - 17:12
im sure worm writers will find a way around it
[1]

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.


Scroll to the Top
....
My Preferences
....
Communicating with server
Loading
Please Wait...
....
Loading
 X 
....