Saturday, October 07, 2006

Security Vendors Reject Microsoft's Call for Innovation

Microsoft contends that its partners should embrace the security features being added to its Vista operating system instead of complaining about them, but software makers including Symantec and McAfee said that the company's mandate for new product innovation only benefits its own interests.

At the crux of the dispute is Microsoft's contention that controversial security features included in Vista, its next-generation Windows OS, have been added merely to provide an adequate "baseline" of protection for users.

Meanwhile, its oldest and largest security software partners, including Symantec and McAfee, said that the tools have been designed to put their products at a disadvantage and give favor to rival technologies made by Microsoft.

When presented with the security companies' issues, Microsoft defends that it has taken the opportunity with Vista to blend much needed security protection into Windows, which has long been the primary target of virus writers and other hackers.

The features may make it harder for its partners to build new products that work with Vista, but the addition of security features is an evolutionary development demanded by users' need for onboard OS protection, Microsoft leaders said.

Rather than protesting that its work has made new product development more difficult, Symantec and McAfee need to think of new ways to build their applications to build off of innovations offered in Vista, which is due out in November 2006, said Ben Fathi, corporate vice president of the Microsoft's Security Technology Unit.

"What we haven't heard is how those companies that are complaining will do that themselves, and raise the bar to improve their own products," said Fathi.

"Basically they are saying they have had this market and their products, and that they want all that to stay the same. I'm sorry, but the world has moved on and we now have a more secure platform; that's the way the computing world works."

Pushed further, Fathi makes no secret of his belief that the security vendors are merely trying to defend revenue streams that may be threatened by the features added in Vista, which include the addition of anti-malware tools to fight spyware and phishing that have typically been provided by aftermarket companies such as Symantec and McAfee.

"They're asking us to ship a less secure operating system to keep the patients sick so they can keep serving up the medicine; but instead of doing that they need to innovate just like we have," Fathi said.

The dispute revolves specifically around Microsoft's use of its PatchGuard and Windows Security Center features in Vista, both of which have already been offered by the software giant in other versions of its products, Fathi points out.

PatchGuard, which forbids Windows applications from accessing the Vista kernel in the 64-bit iteration of the OS, will keep security technologies such as behavior monitoring systems from working as well as they have in the past, when they have been allowed to touch the kernel, claim the security vendors.

Microsoft, based in Redmond, Wash., maintains that locking down the kernel is a necessity to fight malware such as rootkits, and that its own security technologies won't access the kernel either.

Windows Security Center—meant to help consumers ensure they have necessary software patches in place and keep their security applications updated, and maintain valid licenses for the programs—will block similar features offered in existing anti-virus packages from Symantec and McAfee, executives from those companies said.

No comments: