Three Minutes with Microsoft's Security Guru

[Night Hawk]

Three Minutes with Microsoft's Security Guru

Jaikumar Vijayan, Computerworld
Sunday, November 01, 2009 11:10 AM PST

Microsoft Corp. pours more money into software security than any other major vendor both because it has to and because it can. Yet for all the investments in security, the number of vulnerabilities discovered in the company's products has increased over the years, prompting questions over whether the company has reached the limits of its ability to debug software.
In an interview with Computerworld , Steve Lipner, senior director of security engineering at Microsoft's Trustworthy Computing Group, refuted that suggestion and insisted that the company's Security Development Lifecycle (SDL) approach is working as it was meant to. He said SDL has reduced the number of flaws in Microsoft's newer products while also making them harder to exploit.
Microsoft has invested a lot in security, but the number of flaws being discovered

in its products has only been increasing. Why? There are a couple of things that are going on. Obviously, one of them is that security attacks and the security research environment are changing. Security vulnerabilities are actually worth money to the people who find them, so that intensifies the search for vulnerabilities in the outside world.

More at: Three Minutes with Microsoft's Security Guru - Business Center - PC World

 

[hackerman1]

hi !

thanks !