Microsoft will debut vulnerability predictions today when it issues 11 security updates for Windows, Office and Internet Explorer.
Announced more than two months ago, the "Exploitability Index" will be added to the bulletins that accompany each update. Microsoft's security experts will rate each vulnerability using a three-step ranking, in descending order of severity:
Consistent exploit code likely
Inconsistent exploit code likely
Functioning exploit code unlikely
Microsoft expects that users and corporate IT administrators will combine the index rating with the company's current threat rankings, which estimate the potential impact as "critical" through "low," to prioritize patches.
Also tomorrow, Microsoft is expected to reveal more information about another new program it talked up in August, Microsoft Active Protections Program (MAPP). An information-sharing effort, MAPP gives select security vendors an early jump on crafting exploit signatures by providing technical details of to-be-patched vulnerabilities before updates are issued. Prior to the program, security vendors had to wait like any customer for Microsoft to issue its patches before they could begin examining the bugs and start developing anti-exploit protection.
Microsoft has not said which security vendors are participating in the program, how far in advance they are given the information, or even the amount or type of data Microsoft will share.
In response to questions last Friday, a Microsoft spokesman would only say, "There will be some new information [about MAPP], along with the Exploitability Index, come Tuesday with the bulletin release."
However, it appears that security companies that have been accepted into MAPP received previews of tomorrow's vulnerabilities as early as last Thursday. Then, a spokeswoman for nCircle Network Security Inc. said that because the company had joined MAPP, its researchers would not be available for comment on the pre-patch notification Microsoft released that day.
Microsoft will release its 11 security updates today.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. IT Service Management Needs and Adoption Trends: An Analysis of a Global Survey of IT Executives
The state of Middleware
Controlling storage costs with Oracle database 11g
How to improve employee productivity in small and medium businesses
Making the Business Case for IT Consolidation
Look before you leap | Key considerations for moving to 802.11n
The Case for an Untethered Enterprise
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
FrontRange Solutions launches HEAT Plus Mobile to reduce help desk costs and improve service management productivity 2008-12-02 15:15:00+11
AARNet Helps to Advance Indigenous Health 2008-12-02 12:44:00+11
Orbis selects Telstra International as its data centre partner for the UK, Europe and Middle East Region 2008-12-02 11:23:00+11
ComOps Deploys Corporate Performance Reporting Solution For Healthcare Test Manufacturer 2008-12-02 10:09:00+11
Mornington Peninsula Shire implements Objective to manage knowledge and deliver service excellence 2008-12-02 09:56:00+11
Best Practice in Building an Integrated Information Management Strategy
Discover the business value that creating an integrated information platform can bring. Learn how to provide consistent, accurate information to all stakeholders within your business network. Integrate vital data from disparate sources and deliver a trusted information foundation. Read on to uncover the stepping-stones to your new information management strategy.












