Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

Microsoft Staffers Debate "Worst Jobs In Science" Nomination

Analysts also believe the hard work done in the MSRC is starting to pay off, and agree that the ranking is a hangover of past product vulnerabilities
Page:

Working in the Microsoft Security Response Centre (MSRC) has been voted number six out of the ten worst jobs in science in 2007, however Microsoft staffers reckon there is nowhere else they can find an opportunity like the ones they meet every day.

Analysts also believe the hard work done in the MSRC is starting to pay off, and agree that the ranking is a hangover of past product vulnerabilities.

Only in the MSRC do you come to work knowing that what you did today can help protect hundreds of millions of people around the world from malicious attackers
Mark Griesi — security program manager, MSRC

This month, US-based Popular Science magazine listed its annual top ten "Worst Jobs in Science" awards, with work in the MSRC pipping professions such as whale-faeces researcher, forensic entomologist, Olympic drug tester, gravity research subject for the middle-of-the-road ranking.

The top five professions as nominated by Popular Science magazine were coursework carcass preparer, the humble garbologist, an elephant vasectomist, oceanographer and finally hazmat diver.

The article said working as a Microsoft Security Grunt was "like wearing a big sign that reads 'Hack Me'" and called the work manning the secure@microsoft.com as tedious.

But work at the MSRC, however "tedious" it may already be, could be making practical advances in Microsoft's operating system security.

According to the recent Microsoft Security Intelligence Report, new vulnerability disclosures increased 41 percent in 2006.

In a blog post dated June 15, 2007, published on IDG's US CSO online Web site, Microsoft's Trustworthy Computing Group Security Strategy Director, Jeff Jones, perfomed an anlaysis on Windows Vista vulnerabilities since the six-month launch of the operating system, saying "it does seem like there are more researchers, better trained and with better tools and techniques than ever before ... creating an ecosystem better able to find and disclose security vulnerabilities".

A link to the blog and vulnerability report is available here

Jones added that during the first six months Windows Vista was available, Microsoft released four security bulletins and relevant updates addressing a total of 12 vulnerabilities affecting Windows Vista.

In the first six months of Windows XP's availability, according to Jones, Microsoft fixed a total of 36 vulnerabilities in the first six months (including three vulnerabilities in Internet Explorer disclosed and fixed three weeks prior).

23 of the Windows XP vulnerabilities were rated high by the US National Institute of Standards (NIST) in the National Vulnerability Database (NVD).

The study also compared vulnerabilities released in Red Hat Enterprise Linux 4 Workstation, Ubunutu 6.06 and Novell SUSE Linux Enterprise Desktop.

Page:

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Linux, Microsoft, Milestone, Novell, RECKON, Red Hat, SuSE

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Whitepapers
Latest Stories
Community Comments
Latest Blog Posts
Whitepapers
  • Case Study: BNP Paribas Deploys Oracle Exadata to Accelerate Information Processing - The Hardware Perspective
    Datacenters are an aggregate of very heterogeneous elements interacting with each other and incurring a complex chain of dependencies, particularly around the point of contact between hardware and software. Against this backdrop, IDC is observing a great push from suppliers and end users alike toward a consumption model based on pre-integrated blocks of optimized hardware and software that IT departments need only to fine-tune, as opposed to build out of a collection of different components. Read on.
    Learn more »
  • Case Study: Svenska Kraftnät safeguards web and ensures communication security with Clearswift
    Energy producers from surrounding countries load power onto the Swedish National Grid’s network, with energy suppliers then paying the Swedish National Grid to load onto their grids for them to sell-on to customers. Using Clearswift’s Email Appliance, and MIMEsweeper for SMTP means that the organisation has safe and resilient email helping them to meet their goal of providing a safe, robust, cost-effective and environmentally sound energy transmission system.
    Learn more »
  • SOA and Business Processes: Making the Connection
    Service-Oriented Architecture (SOA) is also complex, and one of its main characteristics is that an SOA system is comprised of multiple applications that are combined to accomplish critical business processes. Discussions of SOA can quickly grow so complex that the system’s main benefits to an organization are difficult to fully understand. This article discusses SOA Suite 11g, a family of products that take SOA to a new level and correct some of the problems caused by the very combination of components and multiplication of languages that make SOA a flexible, agile system.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments