Microsoft's Security Risks

During a security Webcast today, Microsoft revealed that it receives 2,500 to 3,000 attempted intrusions or scans a day--or about 100,000 month. Despite the posed security risks, the last major breach occurred in October 2000.

The company also revealed that it deals with about 300,000 network devices. The company uses about 350 access points to maintain its massive wireless network. Unofficially, I’ve heard the PC ratio is 3-to-1, meaning an average three computers for every employee. The company quarantines about 125,000 e-mails a month.

For antivirus, Microsoft uses eTrust from Computer Associates. That relationship might explain, in part, CA's eTrust EZArmor giveaway. As part of Microsoft's renewed emphasis on security, CA is giving away its consumer antivirus/firewall product with 12 months of free updates. The promotion can be found here.

Microsoft considers mobile workers/remote users to be one of its most significant security risks. The company maintains about 175 remote access points, with 60,000-plus employees or partners using remote access services. Thirty thousand Microsoft employees (there are 58,000) use remote access 3 to 5 times a week.

To shore up security, Microsoft uses two-factor authentication. In addition to the typical user name and password (in this case a personal identification number), remote users must authenticate with a smart card. The employee badge, which unlocks access to physical building, acts as the smart card for authenticating digital access.

Customers looking for operating system security improvements need to wait for updates to Windows XP and Windows Server 2003. Windows XP Service Pack 2, which is chock full of security enhancements, is expected to enter beta testing by the end of the month. Today, Microsoft reiterated that the service pack would ship during first half 2004. But, Windows Server 2003 Service Pack 1’s release has been pushed back until second half 2004. During its professional developer conference during the last week of October, Microsoft had scheduled release of Service Pack 1 for first half.

Posted by Joe Wilcox at December 01, 2003 03:43 PM