"Days-of-Risk (DoR) is a measurement of the time period of greatly increased risk from when a vulnerability has been publicly disclosed (and thus known and available to millions of script-kiddies and other malicious attackers) until a vendor patch is available to close the vulnerability," Jones stated explaining how he understands the attack window, adding that "during 2006, Microsoft provided fixes for publicly disclosed vulnerabilities the quickest on average at about 29 days and Sun came in at the far end with the highest average DoR." Jones compared all Mac OS X and Solaris versions patched in 2006, Windows 2000 (Professional and Server), and Windows XP, Windows Server 2003, Red Hat Enterprise Linux 2.1, 3 and 4, SUSE Linux Enterprise Server 8, 9 and 10, Novell Linux Desktop 9, and SUSE Linux Enterprise Desktop 10. Jeff Jones, a Security Strategy Director in Microsoft's Trustworthy Computing group looked at the time users of various operating systems were exposed to attacks in 2006. This context is a direct result of Microsoft's baptism of fire in comparison with the providers of rival products. Windows is the most attacked platform in the world due to its ubiquity and, coincidently, it is also the operating system exposing users to risks for the shortest period of time.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |