 |
 |
 |
Security In Microsoft Vista? It Could Happen
Friday, December 1st, 2006
Microsoft claims, "Windows Vista is engineered to be the most secure version of Windows 
yet." Security is so important to Vista that it is listed near the top of 12 features advertised to users, second only to "User Experience." Microsoft is even publishing books on its internal practices, like The Security Development Lifecycle by Michael Howard and Steve Lipner; Hunting Security Bugs by Tom Gallagher, et al; and The Practical Guide to Defect Prevention by Marc McDonald, et al. What will be the net effect of this focus on security?
The single most important aspect of Vista from a security standpoint may be the introduction of User Account Control. In a nutshell, users are by default not given admin privileges. They will not be allowed to install software without elevating their powers—something centralized IT shops will probably not enable. If a user can’t install software, neither can malicious "drive-by downloads." This feature will limit the effectiveness of client-side attacks against patched Vista systems, although privilege escalation zero-day attacks will still cause havoc. Security In Microsoft Vista? It Could Happen - Security Feed - Blog - CSO Magazine
Popular Posts
Please read our Disclaimer
