Software Update as a Mechanism for Resilience and Security Proceedings of a Workshop (2017) / Chapter Skim
Currently Skimming:
3 Microsoft's Approach to Software Updates
3 Microsoft's Approach to Software Updates
Pages 19-23
The Chapter Skim interface presents what we've algorithmically identified as the most significant single chunk of text within every page in the chapter.
Select key terms on the right to highlight them within pages of the chapter.
From page 19... ...
The operating system also runs on diverse products such as Raspberry Pis and augmented reality devices. Reiterating other workshop participants' characterizations of security breaches as "only a matter of time" -- a risk to be managed but perhaps never eliminated -- Picoto noted that the inherent vulnerabilities of software are nonetheless often underappreciated by users and organizations.
|
From page 20... ...
In addition, he noted, Microsoft features such as Defender Advanced Threat Protection and the Enhanced Mitigation Experience Toolkit enable engineers to detect attacks and begin designing security updates to address them before they become public. Picking up on a theme that emerged throughout the workshop, Picoto emphasized that the growing landscape of Internet of Things (IoT)
|
From page 21... ...
Microsoft's new model also addresses the challenge of what Picoto called selective patching, a previous approach that allowed users to pick and choose the different security patches they wanted to install. He said that software updates are developed with the assumption that all the currently recommended patches are in place, and when this isn't the case, it can cause quality issues.
|
From page 22... ...
Customers can choose whether they want to receive feature updates each time they become available or remain with the same features for 10 years, which is how long Microsoft commits to supporting a given OS version. After experimenting with this update model in Windows 10, Microsoft decided to make it available to customers using both Windows 7 (which most of their enterprise customers are currently running)
|
From page 23... ...
A bright spot among these problems is that as customers move to the most recent software updates, Microsoft has seen a drop in help desk phone calls reporting malware, Picoto said. Drastically simplifying user choice (e.g., by eliminating the ability to choose which pieces of the software to update)
|
Key Terms
This material may be derived from roughly machine-read images, and so is provided only to facilitate research.
More
information on Chapter Skim is available.