Microsoft to share patch details with vendors in advance

gallery

Microsoft plans to share technical information with selected security vendors before patches and software updates are released to the public.

The scheme is called the Microsoft Active Protections Program (MAPP) and is aimed at stopping what Microsoft calls an ‘undesirable cycle’. When a patch is released, the details of the vulnerability it fixes are also released. Quickly thereafter, exploit code based on those vulnerabilities is also released, leaving systems which are yet to be patched open to attack. It is hoped the programme will give security providers a head start against malware writers in protecting their systems.

Reports have said that early participants of the scheme include IBM, Juniper Networks and Tipping Point, but more are expected to join.

It is also reported that participating companies must have a large customer base and sell Windows-related products.

“As security threats become more sophisticated, the global security community must combine its resources and work together to provide maximum security protections to worldwide internet users,” said George Stathakopoulos, general manager of security engineering and communications at Microsoft.

“No one organisation can counter online attacks alone. Therefore, we must use the combined strength of the industry, partners, customers and public organisations to build a more secure environment for everyone,” he added.

Microsoft also announced a new ‘Exploitability Index’ which will provide its customers with guidance about the likelihood of hackers writing malware against vulnerabilities addressed by Microsoft security updates.

Email to a friend

Print this page