|
The security enhancements in Windows 7 will enable Microsoft to put
up a stronger fight against competing operating systems but they
will not replace traditional layers of security for corporate
networks. These are the claims of one senior technologist at
Internet security firm Sophos.
In a podcast interview, James Lyne analysed various aspects of
Microsoft’s new operating system, due for release later this year,
and concluded that whilst it contains elements that may deliver real
value to certain users, Windows 7 is not able to single-handedly
protect companies from security threats and data leakage.
Windows Firewall
The Windows 7 firewall policy model is much stronger than its Vista
predecessor and now includes bidirectional filtering as well as
multiple locations so that a user may differentiate between browsing
in Starbucks or at home. But Lyne points out that businesses need to
consolidate their security management into one central location and
is sceptical as to whether companies would choose a Windows 7
firewall over a global network policy.
UAC (User Account
Control)
The notoriously intrusive UAC feature in Vista, which continually
asks the user to approve such actions as installing unknown devices
and software, is still present in Windows 7 but is less conspicuous.
However, Lyne states that any user authorisation policy is
ultimately flawed because the user is rarely qualified to identify a
potential threat.
Lyne comments: “What’s required is a more centrally defined policy
that says what is good and bad on a computer. Why should the
secretary or the guy sitting there doing his accounts have to be an
expert in whether XYZ application can access this arbitrary location
in the registry.”
|
