Microsoft's New Program --- MAPP

D

Dan

Will the vulnerabilities be available to security researches 3 days or less
in October as scheduled for MAPP or is this scheduling still all up in the
air where Microsoft chooses one of 3 points in how a patch may affect a user
and/or business. I imagine you want users that work in the electronics
industry and are focused on external security and internal safety issues.
Please Steve Riley can you go into any more detail(s) about the upcoming
Microsoft program to better educate your users and I could find only limited
information about it on the 'Net where say an example was given that a
business might want to first patch vulnerability 3 which let us say is
moderate given its exploitability of high vulnerability in the attack vector
once the patch and associated information are sent out to the public compared
to vulnerability 1 which is critical but has a low exploitability rating.
 
P

PA Bear [MS MVP]

I wouldn't expert MS to show its hand to the end-user until later this year,
Dan.

cf.
http://www.microsoft.com/presspass/press/2008/aug08/05-08BlackHat08PR.mspx

cf. http://www.microsoft.com/presspass/events/blackhat/docs/MAPPFS.doc
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


Dan wrote:
> Will the vulnerabilities be available to security researches 3 days or
> less
> in October as scheduled for MAPP or is this scheduling still all up in the
> air where Microsoft chooses one of 3 points in how a patch may affect a
> user
> and/or business. I imagine you want users that work in the electronics
> industry and are focused on external security and internal safety issues.
> Please Steve Riley can you go into any more detail(s) about the upcoming
> Microsoft program to better educate your users and I could find only
> limited
> information about it on the 'Net where say an example was given that a
> business might want to first patch vulnerability 3 which let us say is
> moderate given its exploitability of high vulnerability in the attack
> vector
> once the patch and associated information are sent out to the public
> compared to vulnerability 1 which is critical but has a low exploitability
> rating.
 

Similar threads

J
  • Article
Replies
0
Views
79
John Cable, Vice President, Program Management
J
K
Replies
0
Views
93
Kathleen Mitford, CVP, Global Industry
K
Y
Replies
0
Views
23
Yusuf Mehdi, Executive Vice President, Consumer
Y
Back
Top Bottom