http://www.informationweek.com/story/showArticle.jhtml?articleID=159401297 By Eric Chabrow InformationWeek March 11, 2005 Microsoft will give the Air Force and other federal agencies software patches to test a month before the general public receives them. The arrangement is part of Microsoft's Security Update Validation Program, a "closed beta program" introduced within the past 12 months. Microsoft will begin giving prerelease software patches to the Air Force, The Wall Street Journal reported Friday. The Department of Homeland Security will give advance notice of the new vulnerabilities to other government agencies and distribute the patches to them after they've been tested by the Air Force, the newspaper reported. Advance testing will make it possible for government agencies to install the patches as soon as Microsoft releases the final versions. That's aimed at helping agencies stay ahead of hackers, who often are able to develop attacks that exploit a software hole less than a week after Microsoft discloses the vulnerability. The early-access program is also available to select business customers. The software updates are provided to program participants only for testing purposes, a Microsoft spokesman says. "Customers are specifically prohibited from deploying these security updates in a production environment," the spokesman says via E-mail. "Participants are testing prerelease software, therefore the updates are provided only to deploy in a test environment. Participants can only deploy the security updates to their entire infrastructure when they are released to the general public." The issue of providing advance access to security bulletins and software patches is a sensitive subject for Microsoft and other software vendors, who need to ensure that information and code don't find their way to hackers before final patches are available for all customers. And customers who don't receive advance notice may believe they're at a disadvantage. _________________________________________ Bellua Cyber Security Asia 2005 - http://www.bellua.com/bcs2005
This archive was generated by hypermail 2.1.3 : Mon Mar 14 2005 - 09:07:10 PST