Microsoft Defends Security Approaches What's the Story Behind Redmond's Recent Rash of Security Initiatives? Tim Gray
For many online users, the thought of Microsoft jumping deeper into the computer security software game might seem a welcome and logical respite aimed at helping rid their lives of spyware, malware, and worms trolling the Internet.
But as more research firms point to a steady growth of users abandoning Microsoft's Internet Explorer browser in favor of Mozilla Firefox and other alternatives, security analysts see a new effort by Microsoft to ramp up security offerings in order to nip the erosion. Anti-virus vendors, meanwhile, see a potential new competitor in the sector.
"There is a lot going on, but it seems obvious they'd like to stop these defections," John Pescatore, a Gartner research fellow, says of Redmond's
recent activity.
Those initiatives include last month's purchase of anti-spyware company Giant Company Software, signaling Microsoft's determination to gain a measure of control over security breaches that have plagued IE and its ubiquitous Windows operating system. Just weeks after the purchase, the company rushed out a beta of
Giant's anti-spyware tool, which includes spyware removal tools.
In addition to the spyware-sniffer beta offering of Microsoft Windows Antispyware, Microsoft has reportedly mulled a plan to sell anti-virus software. It also recently began deploying external testers under its Security Update Validation Program in order to bolster its monthly patch program by bringing on select patch testers.
The timing of the releases has security analysts and anti-virus vendors questioning how much heat Redmond is feeling.
Gytis Barzdukas, a marketing manager in Microsoft's security business and technology unit, says the bottom line is that the company is addressing customers' needs with its security initiatives. This includes its ongoing Trusted Computing initiative, working with anti-virus vendors, free spyware removal tools, and an enhanced external patch program.
"We've hardened the operating system with XP SP2 [Service Pack 2]," which includes enhancements to security with IE, he says.
As for Microsoft's malicious software removal tool, it is designed to complement existing anti-virus offerings, which scan and protect users' computer systems.
Despite a rather negative review of the anti-spyware beta by Walter Mossberg of the Wall Street Journal recently, Barzdukas claims reaction
has been largely positive. In his column, Mossberg wrote that he "could not recommend it." He noted that built-in defaults drive the user to MSN, which "smacks of the same kind of coercion the spyware authors are using."
Pescatore's main issue with the beta tools is that they only work with Internet Explorer.
"If they want to bring this to market, they are going to have to have it support Mozilla, especially if they wanted to sell the software to enterprises," he says. "They've got it baked into their DNA that everything defaults to MSN. If they expect to sell it as an enterprise product, they need to change also."
Barzdukas says Microsoft may address such default issues in a subsequent beta of the product. In addition, he told internetnews.com, the criticism is somewhat premature, especially for an early beta of the product.
"We're doing a lot of work on this," he said. "Spyware is a growing problem. It's everywhere. That's part of the reason we rolled out the beta within 21 days of acquiring Giant. We felt it was important enough to put it out there. That's the whole concept of a beta."
The numbers also speak volumes, he added. Microsoft's spyware removal tool has seen over three million downloads since its release earlier this month.
"This is really about making sure we can scan and remove viruses already on a machine."
Precursors of a Larger Shift into the Anti-Virus Realm?
The products could also signal a bigger shift into the anti-virus software business, say security analysts, which would put Microsoft in direct competition with major anti-virus and security vendors such as Symantec and McAfee, Microsoft's sometime business partner.
Bill Kerrigan, senior vice president of the consumer division at McAfee, says his company is capable of thriving under the pressure of new competition — even if it is from Microsoft — but admits anyone would be crazy not to be concerned once a major company takes aim at your
marketplace.
"We are hearing from both partners ... and from customers, that they do not want to manage a portfolio," he says, alluding to the competitive advantage
his company's all-encompassing multi-layered protection IntruShield would have over multiple tools from Microsoft. "It has to be comprehensive but very easy to use."
But he also believes Microsoft's entrance into the market would create consumer awareness, bringing about more business. Still others warn that Microsoft could quickly figure out a way to drive that business back to its Redmond campus.
One chief complaint repeated numerous times about the beta is that Microsoft is selling a product (Windows) that is often the root of security problems, and is mulling selling a product that is intended to remedy those problems.
"It's a bit like selling the radar gun to the police and then the radar detector to the speeder," says Shane Coursen, senior technology consultant with
Kaspersky Labs. Coursen adds that it is logical to assume Microsoft has been hearing the footsteps of alternative browsers and operating systems threatening its dominant market share.
Thomas Kristensen, of Secunia, echoes this theme, saying Microsoft ought to give IE security the highest possible priority and that it should ensure the time between discovering vulnerabilities and issuing patches for them decreases.
Barzdukas says Microsoft's Security Update Validation Program is a new process to its patch program that includes working with a set of customers to make sure patches are issued in a timely manner without breaking applications.
"We just can't throw a fix out there without testing it. We have software running on hundreds of millions of computers. This is to make sure the cure is better than the pain customers are feeling," he says. It is also to make sure that customers get an opportunity to run a test of the patch before it's released, he added.
As for the recent anti-spyware features, Microsoft has a relationship with the entire security industry via the Virus Information Alliance, counters Barzdukas. The mission of the group, which counts security software vendors as members, is to "educate and protect Microsoft customers against the threat of malicious code attacks as well as emerging Internet threats."
"We talk to these vendors on a daily if not a weekly basis, and we'll continue to work them," he says. "Our recommendation is to have a firewall and anti-virus software running, sign up for updates, and make sure users are running current anti-virus software."
