Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

For security ask yourself...what would Microsoft do?

by Donna Buenaventura Nov 22, 2003 12:01AM PST

Company reveals that it experiences more than 100,000 intrusion attempts monthly

Despite taking a beating in the press and from customers for security holes in its products, decision makers at Microsoft appear to think the company still has something to teach the world about computer security.

The Redmond, Washington company this week published a technical white paper that describes its internal security practices, which Microsoft hopes will "help customers successfully secure their environments," the company said.

The paper, simply titled "Security at Microsoft," details the methods and technologies that the company's Operations and Technology Group (OTG) use to secure the company's global corporate network of more than 300,000 computers and 4,200 servers.

In the paper, Microsoft describes its risk management strategy, which involves classifying different computing resources according to their "value class" -- from servers hosting the Windows source code down to test servers. Microsoft also provides guidance on how its security group assesses the potential risks and threats to those assets and creates policies to secure the assets that are appropriate, given the value of the data they contain.

http://www.infoworld.com/article/03/11/21/HNmssecurity_1.html

Discussion is locked

2 Posts

- Collapse + Expand Details

- Collapse -

NT Along about now, my eyes glaze over.

by William Randall Nov 22, 2003 1:40AM PST

- Collapse -

Took a quick glance....

by Keith Marcotte Nov 22, 2003 3:16AM PST

lots of things to consider there. As probably one of the most attacked companies on the internet, they should have learned a thing or two about hardening their security. The main hits on their security is that things were turned on out-of-the-box and the constant patching.