PPT模板微软蓝灰风格PPT模板 .ppt
《PPT模板微软蓝灰风格PPT模板 .ppt》由会员分享,可在线阅读,更多相关《PPT模板微软蓝灰风格PPT模板 .ppt(26页珍藏版)》请在得力文库 - 分享文档赚钱的网站上搜索。
1、Microsoft Security Strategy,Steven Adler Product Manager Microsoft EMEA,Session Agenda,Focus on Customer Challenges Microsoft Security Strategy Secure Windows Initiative Strategic Technology Protection Program Trustworthy Computing Building the secure platform .NET Framework Windows .NET Summary Que
2、stions,Technology, Process, PeopleWhat are the challenges?,Products lack security features Products have bugs Insufficient technical standards Difficult to stay up-to-date,Design for security Roles & responsibilities Vigilance Business continuity plans Stay up-to-date with security development,Probl
3、em recognition Skills shortage Human error,Microsoft Security Strategy,Secure Windows Initiative“Engineering For Security”,Goal: Eliminate Every Security Vulnerability Before The Product Ships,People,Process,Technology,Industry Yardstick,Source: Security Focus ,Secure Windows Initiative,People,Train
4、, and keep current, every developer, tester, and program manager in the specific techniques of building secure products,Process,Make security a critical factor in design, coding and testing of every product Microsoft builds Cross-group design & code reviews Security Threat Analysis part of every des
5、ign spec Red Team testing and code reviews Focus not confined to buffer overruns Security bug feedback loop & code sign-off requirements External reviews and testing by consultants and public,Technology,Build tools to automate everything possible in the quest to code the most secure products Prefix
6、and Prefast for buffer overrun detection Updated as new vulnerabilities found Visual C+ 7.0 compiler improvements Domain-specific tools (i.e. RPC security stress),Secure Windows InitiativeExternal Security Review,FIPS 140-1 evaluation of Cryptographic Service Provider (CSP) Completed Government vali
7、dation of base crypto algorithms in Windows Common Criteria evaluation In Preparation Evaluation of Windows source code against International security criteria for evaluating Third party expert review of key components Source code licensed to over 80 universities, labs, and government agencies,Goal:
8、 Help customers secure their Windows Systems,People,Process,Technology,Strategic TechnologyProtection Program,Strategic Technology Protection Program - Customers Need Our Help,I didnt know which patches I needed I didnt know where to find the updates I didnt know which machines to update We updated
9、our production servers, but the rogue servers got infected,More than 50% of the customers affected by Code Red were not patched in time for Nimda,STPP: “Get Secure”,Coming - Enterprise Security Tools Microsoft Baseline Security Analyzer SMS security patch rollout tool Windows Update Auto-update clie
10、nt,Now - Microsoft Security Toolkit Server oriented security resources. New server security tools and updates, Windows Update bootstrap client for Windows 2000,Now - Security Assessment Program Offering Available immediately through MCS/PSS,Now - Free Virus Support HotlineContact your local PSS offi
11、ce,Get SecureMicrosoft Security Toolkit,Gets Windows NT and 2000 systems to secure baseline, even disconnected net Automates server updates One-button wizard and SMS Scripts Updates and Patches Includes all Service Packs and critical OS and IIS patches through 10/15 HFNetchk: patch level verifier II
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- PPT模板微软蓝灰风格PPT模板 ppt 模板 微软 风格 作风
限制150内