It looks as if Microsoft is ready to do its part to discourage cyber crimes. Microsoft plans to offer real-time feeds that partners can use to analyze possible cyber threats and take the proper steps to boost their defenses against these attacks.
Microsoft currently has a process set up to take down destructive botnets. Microsoft “swallows” the botnets and permits them to infect accounts that are highly controlled by Microsoft’s team. Once the botnets infect the accounts, Microsoft learns how they work and eliminates them as a threat.
Previously these details had not been shared, but now this data can be given to the government and private organizations, CERTs, & ISPs. Even though the number of attacks will not likely decrease thanks to this real-time feed, the impact of a feed like this will be great. The degree of damage from a cyber attack will likely be greatly lessened because IT security professionals will be able to more rapidly answer a threat.
Another great impact a real-time threat feed could have is an increase in overall information sharing between IT security companies. For too long IT companies have been unwilling to share threat information for the fear that it could fuel more attacks. Most analysts say this an unsupported fear. The cyber criminal “community” has already been sharing and gaining knowledge from each other. It’s only logical therefore that IT security professional share as much information as possible to combat the seemingly unending barrage of new cyber threats.
Let’s hope that security professionals soon realize that sharing information is more valuable than secrecy. And let’s hope that Microsoft’s move is a first step in this change of attitude.
"We have had a longstanding business relationship with Allen Technology Advising and they have always been incredibly responsive to our needs. I know that it would be very difficult for our organization to get the same level of service and expertise anywhere else for a comparable price."