Microsoft readies first attack forecast

Microsoft debuts predictions that rate "exploitability" of vulnerabilities.

Microsoft will debut vulnerability predictions today when it issues 11 security updates for Windows, Office and Internet Explorer.

Announced more than two months ago, the "Exploitability Index" will be added to the bulletins that accompany each update. Microsoft's security experts will rate each vulnerability using a three-step ranking, in descending order of severity:

Consistent exploit code likely

Inconsistent exploit code likely

Functioning exploit code unlikely

Microsoft expects that users and corporate IT administrators will combine the index rating with the company's current threat rankings, which estimate the potential impact as "critical" through "low," to prioritize patches.

Also tomorrow, Microsoft is expected to reveal more information about another new program it talked up in August, Microsoft Active Protections Program (MAPP). An information-sharing effort, MAPP gives select security vendors an early jump on crafting exploit signatures by providing technical details of to-be-patched vulnerabilities before updates are issued. Prior to the program, security vendors had to wait like any customer for Microsoft to issue its patches before they could begin examining the bugs and start developing anti-exploit protection.

Microsoft has not said which security vendors are participating in the program, how far in advance they are given the information, or even the amount or type of data Microsoft will share.

In response to questions last Friday, a Microsoft spokesman would only say, "There will be some new information [about MAPP], along with the Exploitability Index, come Tuesday with the bulletin release."

However, it appears that security companies that have been accepted into MAPP received previews of tomorrow's vulnerabilities as early as last Thursday. Then, a spokeswoman for nCircle Network Security Inc. said that because the company had joined MAPP, its researchers would not be available for comment on the pre-patch notification Microsoft released that day.

Microsoft will release its 11 security updates today.

Join the Good Gear Guide newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags Microsoft

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Gregg Keizer

Computerworld
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?