WIPO-ESCWA ARAB REGI ONAL CONFERENCE ON INTELLECTUAL PROPERT Y AND ELECTRONIC COM MERCE

Size: px

Start display at page:

Download "WIPO-ESCWA ARAB REGI ONAL CONFERENCE ON INTELLECTUAL PROPERT Y AND ELECTRONIC COM MERCE"

Godwin Bennett Wilkerson
5 years ago
Views:

1 WIPO-ESCWA/EC/BEY/ ORIGINAL: Eglish DATE: April 2003 E 03 /Doc. 5a LEBANESE REPUBLIC UNITED NATIONS ECONOMIC AND SOCIAL COMMISSION FOR WESTERN ASIA (ESCWA) WORLD INTELLECTUAL PROPERTY ORGANIZATION WIPO-ESCWA ARAB REGI ONAL CONFERENCE ON INTELLECTUAL PROPERT Y AND ELECTRONIC COM MERCE orgaized by the World Itellectual Property Orgaizatio (WIPO) ad the Uited Natios Ecoomic ad Social Commissio for Wester Asia (ESCWA) i cooperatio with the Miistry of Ecoomy ad Trade Beirut, May 7 ad 8, 2003 Security ad Privacy o the Iteret Mr. Karim Kalaawi Techical Specialist Microsoft- Easter Mediterraea Regio, Beirut

2 Makig Computig More Trustworthy Karim Kalaawi Microsoft Easter Mediterraea

Our Idustry has a Problem Security breaches commo Malicious code Good code with bugs Escalatig challeges Coectivity Admiistratio Adoptio of IT i doubt Customers eed to believe i techologies, compaies

3 Our Idustry has a Problem Security breaches commo Malicious code Good code with bugs Escalatig challeges Coectivity Admiistratio Adoptio of IT i doubt Customers eed to believe i techologies, compaies ad services No commo framework for discussio Reported Vulerabilities by OS i 2001 Platform Redhat Liux 7.0 Su Solaris 8.0 Widows 2000 SCO Ope Server MadrakeSoft Liux Number of icidets Joh McCormick, TechRepublic, Ic., September 24, 2001, based o data provided by Security Focus Bugtraq

4 Microsoft has a Big Problem 9/11, Code Red, Nimda chaged customers priorities ad they have viable alteratives Deep cyicism about our sicerity ad ability to deliver What matters is what we do, ot what we say Corp IT MS Diff. IBM Iovatio 63% 9% 54% Quality Products 50% 22% 72% Trustworthy 24% 49% 73% Ethical 17% 57% 74% Our growth, eve survival, requires trustworthy computig Source: Domestic Corporate Trackig Studies (DC, SV Elite, ad Broad ad Busiess Audiece surveys). Scores are et ( top box (7 9) bottom box (1 3) ).

Critical Ifrastructure Computers are icreasigly

reliability requiremets Iformatio Techology is

5 Critical Ifrastructure Computers are icreasigly essetial our everyday lives Evolvig markets drive ew priorities Complex, itercoected systems Devices at all scales Eterprise reliability requiremets Iformatio Techology is essetial but vulerable Customers wo t deped o what they do t trust

6 The Opportuity To be idispesable, computig must gai the same level of trust that cars, phoes, electricity ad other essetial services ejoy Opportuity Cotiued leadership, reveue ad profitability First mover advatage Competitive differetiatio Doig othig is ot a optio

7 The Goal of the Trustworthy Computig Iitiative To be the trusted vedor of secure, private ad reliable computig for everyoe

8 It s Not Just Security Trustworthy Computig Security Privacy Reliability Busiess Itegrity

9 Customer Priorities Vary END USER BDM IT PRO VAR/DEV ELITES Reliability Safety Busiess Itegrity Reliability Safety Busiess Itegrity Reliability Safety Busiess Itegrity Busiess Itegrity Safety Reliability Busiess Itegrity Safety Reliability Relative Importace of Key Factors Sources - Trust impact: 13 focus groups, iterviews. Trust score: Image trackig study ad trial flash polls. Cheski Research

10 Tacklig the Problem Work o all frots Security, privacy, reliability, busiess itegrity All platforms ad experieces Across the orgaizatio With all our customers Across the idustry Culture shift Trustworthiess as priority Now ad Forever Chage behavior as well as perceptios

Secure by Desig Product People Process Security Push New tools, compiler improvemets Security Busiess Uit Retraied dev, test, PM Appoited Chief

11 Secure by Desig Product People Process Security Push New tools, compiler improvemets Security Busiess Uit Retraied dev, test, PM Appoited Chief Security Strategist Leads drivig best practices across compay R&D budget for security tripled Threat model-drive reviews Bug feedback loop & code sig-off reqs

12 Secure By Default Office XP.exe receipt, script access disabled Widows XP Iteret Coectio Firewall Major products to ship secure by default.net server, IIS6, SQLext, Office 11 Backportig to Widows 2000, IIS5.x ad earlier

Secure i Deploymet STPP - Get Secure Microsoft Security Toolkit Microsoft Baselie Security Aalyzer Security Assessmet Program Deploymet, update, lockdow tools STPP -

13 Secure i Deploymet STPP - Get Secure Microsoft Security Toolkit Microsoft Baselie Security Aalyzer Security Assessmet Program Deploymet, update, lockdow tools STPP - Stay Secure Widows 2000 Security Rollup Widows 2000 SP3 Microsoft Update Corp Editio Microsoft Security Respose Ceter Systems Itegrator Source Licesig Program Widows Update

14 Privacy: Products & Process Product desig P3P support i IE 6 Kerberos for Passport Aoymous XP activatio MSN 8 tools to maage what kids access Busiess practices MSN shows users data held o them FIP, GLB, Safe Harbor Third party audits Privacy Directive ad Hadbook Privacy Health Idex

15 Reliability Five Nies Widows XP Driver maagemet Shared DLL support Improved istallatio, update, backup, repair, recovery Product Quality Iitiative Documetatio, feedback, measuremet, itegratio Error reportig Office fixed 40% of crashes for SP1 VS fixed 57% crashes i beta Vedor web site

Difficult Problems Processors Too may, spreadig too fast, chaotic mega-system behaviors Programmig Too error-proe People Too few kowledgeable oes, ad

16 Difficult Problems Processors Too may, spreadig too fast, chaotic mega-system behaviors Programmig Too error-proe People Too few kowledgeable oes, ad losig groud Complexity/speed too fast for people to comprehed Umaaged systems Policy Legal frameworks & orms lag techological chage No commo idustry vocabulary

17 If You Ca t Measure It, You Ca t Maage It Istitutioalize our commitmet to keep focus ad mometum Recurret, relevat measuremets Actioable tred aalysis Seior positio Workig coucils

18 Steps alog the Way New Focus BillG memo, stad-dows Begi Roll-out Built Trustworthy TWC realized.net server lauches, WS stadards Loghor, DRM, Palladium New critical ifrastructure

19 Summary Trustworthy systems are key to takig Microsoft to the ext level We eed to sell computig systems so safe ad reliable that people ca take them for grated It will be a log jourey Everybody plays a part 2002 Microsoft Corporatio. All rights reserved. This presetatio is for iformatioal purposes oly. Microsoft makes o warraties, express or implied, i this summary.

20 Discussio Cotact:

n Explore virtualization concepts n Become familiar with cloud concepts

n Explore virtualization concepts n Become familiar with cloud concepts Chapter Objectives Explore virtualizatio cocepts Become familiar with cloud cocepts Chapter #15: Architecture ad Desig 2 Hypervisor Virtualizatio ad cloud services are becomig commo eterprise tools to