Roger's Security Blog

As Chief Security Advisor of Microsoft EMEA - lets share interesting security information
Tags

Browse by Tags

TechNet Blogs » Roger's Security Blog » All Tags » incident sharing
Related Posts

  • Blog Post: Infrastructure Planning and Design Guide for Malware Response

    rhalbheer
    A new version of this guide went live – I think something, you should look at. There is a methodology and a process in detail: So, if you want to learn more: http://technet.microsoft.com/en-us/library/cc162838.aspx Roger
    on 20 Feb 2011

  • Blog Post: Security Intelligence Report v9 is online

    rhalbheer
    Usually I blog intensively on the release of the Security Intelligence Report. However, this time I am out of office and have just little time to give you insight. We spent a lot of work to make it more comprehensive and give you a more stable view over quite some time. So there is a great opportunity...
    on 13 Oct 2010

  • Blog Post: Microsoft Malware Protection Center on Facebook and Twitter

    rhalbheer
    I know, I have been fairly slow in blogging currently but I was fairly busy with a few cool projects (which I will disclose later) and – time flies if you are having fun Just a quick one: The MMPC on Facebook and Twitter The Microsoft Malware Protection Center (MMPC) officially launched its Facebook...
    on 28 Jul 2011

  • Blog Post: 10 Years of Trustworthy Computing at Microsoft

    rhalbheer
    Before joining Microsoft a little bit more than 10 years ago, I ran a team at PricewarehoureCoopers on e-Business Risk Management – classical security consulting in the Internet bubble time. When I announced that I will leave PwC and join Microsoft, I got interesting reactions (and remember, this...
    on 12 Jan 2012

  • Blog Post: Microsoft Security Update Guide, Second Edition

    rhalbheer
    A while ago we released the Microsoft Security Update Guide to explain how we release security updates and how you should/could work with our updates. It encompasses these themes: Get to know the security update release process Learn how to evaluate risk See how to mitigate security risks Understand...
    on 28 Mar 2011

  • Blog Post: Cyber Security: The Road Ahead

    rhalbheer
    This paper by the Geneva Centre for the Democratic Control of Armed Forces (DCAF) was just brought to my attention. A piece of work, which is definitely worth working through. It lays out the problem space and then does a deep dive into the different sections: Governments Legislative Bodies The Armed...
    on 14 Apr 2011

  • Blog Post: Keep all your software updated and current

    rhalbheer
    I know that I keep going and going on that. When I talk to customers and mainly to providers of the critical infrastructure about security, one of the key things to me is to keep the software updated. It is about patching and it is about staying on the latest version of your software. To me, today Windows...
    on 13 Apr 2012

  • Blog Post: How to Detect a Hacker Attack

    rhalbheer
    This title immediately caught my attention and probably yours as well: How to detect a hacker attack – something I definitely want to know. And then I realized that the article a) is written from a techie and b) does not really cover the attacks I am worried of most. But I will address this toward the...
    on 30 Sep 2010

  • Blog Post: How to Deal With Vulnerabilities

    rhalbheer
    This is always a fairly emotional theme. What is better to protect the ecosystem? Public or private disclosure? Should somebody paying for vulnerabilities or not? Is a vulnerability auction ethical or not? I know that there are numerous views on that and I do not want to debate them here and now. What...
    on 27 Jul 2010