Microsoft Releases Long-Awaited Security Tool, Sets Linux Preview | Developers

Microsoft has released its long-awaited cloud-based bug detection tool, previously code-named “Project Springfield.” The Windows version became generally available, and a new Linux version became available as a preview last week.

The tool, Microsoft Security Risk Detection, uses artificial intelligence to hunt down security vulnerabilities in software that is about to be released.

Microsoft Security Risk Detection will help developers do fuzz testing, said David Molnar, the Microsoft researcher in charge of the group that developed the tool. Fuzz testing normally is done using outside consultants to test new software. Its purpose is to make sure vulnerabilities can be weeded out before the product goes into wide release to avoid the necessity of patching them on the back end.

The service uses artificial intelligence to ask particular “what if” questions about new software, focusing on critical areas that might be vulnerable to attack by bad actors.

Microsoft first released a test version of the service last year. Docusign, a firm that specializes in automated electronic signatures, is one of the companies that volunteered to try it out.

The tool helped Docusign weed out bugs in its software and almost never returned false positives, according to John Heasman, senior director of software security at the company.

The low rate of false positives is very important, he said, because companies typically have to spend a lot of time tracking down false positives, which uses time that otherwise could be devoted to investigating legitimate threats.

In-House Technology

Microsoft has been using Sage, a key component of the service, since the mid-2000s to test versions of Windows, Office and other products. Several product teams at the company use the service as part of the Microsoft Security Development Lifecycle.

Microsoft plans to offer the tool for sale later this summer through Microsoft Services.

Prevent Defense

The release is meaningful, according to Dustin Childs, communications director for the zero day initiative at Trend Micro, who noted that the service gives developers access to security testing they otherwise might not use.

“Bugs are much easier to detect during software development,” he told LinuxInsider, “so enhanced testing prior to release could prevent security problems down the road.”

Whether companies embrace the service depends largely on how many false positives they get, Childs said. Another important issue will be the trust issue between developers and Microsoft, which could depend on how much information is shared with the developers and how much is retained by Microsoft.

From Microsoft’s perspective, the gain is twofold, said Childs. The service will help Microsoft create a safer ecosystem running a series of Windows applications, and allow the company to show off its cloud computing and AI capabilities. The service also will introduce Azure to a large community of potential customers.

Security is something that everyone wants, but few are willing to shell out the money for it, observed Jim McGregor, principal analyst at Tirias Research.

“IT managers often stick with the security solutions they are familiar with and upgrade with budgetary cycles,” he told LinuxInsider.

The industry rarely works together to resolve security issues, McGregor said.

True IT security requires hardware and software to be effective, he pointed out.

However, Microsoft’s solution takes security to a new level by combining AI and cloud resources, said McGregor. It continuously leverages a wide range of information and reacts to new threats faster than traditional solutions.

“It’s not clear how much success Microsoft will have with this new service,” he said, “but every IT manager should be looking to AI for improved security.”

David Jones is a freelance writer based in Essex County, New Jersey. He has written for Reuters, Bloomberg, Crain’s New York Business and The New York Times.

The post Microsoft Releases Long-Awaited Security Tool, Sets Linux Preview | Developers appeared first on Nigerian News 24/7 | ElotiTV.com.


by Eloti TV via Nigerian News 24/7 | ElotiTV.com

Comments

Post a Comment

Popular posts from this blog

INEC to issue permanent voter cards in 10 states

Latest blog entries - Eloti tV INEC to issue permanent voter cards in 10 states The National Independent Electoral Commission says it will commence the issuance of the permanent voter cards in 10 states of the federation. The Resident Electoral Commissioner in Benue, Alhaji Baba Yusuf, told journalists on Tuesday that the issuance of the cards would be between May 23 to May 25 while the continuous voters’ registration would hold between May 28 and June 1. He said the commencement of the two exercises were a prelude to the 2015 general elections. Yusuf explained those eligible to register in the CVR included those who were not up to 18 years as at 2011 and those who were unable to register during the last exercise. “Those who had problems with the direct data capture machines and were not captured during the 2011 registration exercise as well as those who could not register in 2011 for one reason or the other can also register this year,” he said. The REC advised vot...
Read more

October 1: You are free to live in any part of Nigeria, FG reassures Nigerians

By CALEB AYANSINA ABUJA – FEDERAL Government, Friday, reassured every Nigerian not to panic but to live freely in any part of the country without fear of molestation. The assurance was coming on the heel of growing tension in the country, barely 24 hour to the expiration of the October 1 deadline quit notice issued by the coalition of Arewa youth groups. The Vice President, Prof. Yemi Osinbajo also challenged religious bodies and other relevant stakeholders in the project Nigeria to leverage on their influence to jettison every divisive groups and their actions in the country. Osinbajo, who was speaking at the public lecture to mark the 57th independence anniversary of Nigeria organised by the Nigerian Supreme Council for Islamic Affairs (NSCIA) in Abuja, reiterated the government resolve to achieve just and equitable society. Represented by the Minister of Mine and Steel, Kayode Fayemi, the VP explained that in a society like Nigeria, there is bound to be differences, therefore...
Read more

Donna Karan Apologizes (Again) After Defending Harvey Weinstein

Image
Designer Donna Karan says she didn’t know the extent of the accusations against Harvey Weinstein before she spoke out to defend the disgraced movie mogul. “I heard a whisper, but there were whispers all over,” Karan, 69, said of the sexual misconduct allegations during an interview with ABC News which aired Monday on Good Morning America . “It wasn’t until a day and a half after the I truly heard about it.” She added: “That’s my honest truth. I didn’t know.” The fashion industry vet sparked outrage earlier this month after calling Weinstein a “wonderful” person in a  Daily Mail  interview and suggesting women may be “asking for it” by dressing provocatively. She backtracked days later, issuing an apology and declaring that her statements did “not represent my actual views.” She apologized again in the recent interview, declaring, “I made a huge, huge mistake.” She admitted, “what I said is so wrong and not who I am.” “I was exhausted. I had just come from a 1...
Read more