Microsoft Switzerland Security Blog

Security informations brought to you by the Swiss Security Team.

August, 2008

  • Microsoft Forefront Integration Kit for Network Access Protection

    The Microsoft Forefront Integration Kit for Network Access Protection provides a way for two Microsoft technologies to work together: Forefront Client Security and Network Access Protection (NAP). Forefront Client Security is comprehensive anti-malware software from Microsoft that provides unified protection from viruses, spyware, and other current and emerging threats. NAP is a new feature in Windows Server® 2008 that can control network access based on a computer’s compliance with an organization's health policy. NAP uses system health validators (SHVs) to configure the policies that are used to determine if network access is granted. System health agents (SHAs) provide the information needed to make this determination.

    http://technet.microsoft.com/en-us/library/cc512112.aspx

    Urs

     

  • Tech giants team for online ID cards

    A group of software and online payment companies are teaming up to find a better way than passwords to protect, and prove, your identity online.

    Problems with passwords are well known - people require ever more passwords which means they either get forgotten, or people use the same word for several different services which is a security risk. The new group will seek to find open standards to make it easier to prove your identity online without using dozens of passwords and usernames.

    Equifax, Google, Microsoft, Novell, Oracle and PayPal will work together to create "Information Cards" - online cards like those in your wallet. Different cards can contain different levels of information and can be used to log in to different websites instead of using a username and password. Some may contain just a user name and password, others address information.

    http://informationcard.net/
    http://msdn.microsoft.com/en-us/library/aa480189.aspx

    Urs

     

  • The Open Computer Forensics Architecture (OCFA)

    The Open Computer Forensics Architecture (OCFA) is a modular computer forensics framework built by the Dutch National Police Agency. The main goal is to automate the digital forensic process to speed up the investigation and give tactical investigators direct access to the seized data through an easy to use search and browse interface.

    The Open Computer Forensics Architecture aims to be highly modular, robust, fault tolerant, recursive and scalable in order to be usable in large investigations that spawn numerous terabytes of evidence data and covers hundreds of evidence items.

    http://ocfa.sourceforge.net/

    Urs