Based on what we have seen in Windows .Net Beta 3, Microsoft is trying to make its flagship operating system more secure, but it needs to make more changes. Fundamentally, Microsoft may need to sacrifice some usability to get Windows security where it should be. In talks with Microsoft's IIS team, we learned that they were creating lock-down tools to give IT managers an easy way to harden Web servers. However, as we have seen again and again, IT managers don't always take the steps required to protect servers from known flaws.
|