MSRC Ecosystem Strategy Team

Browse by Tags

All Tags » Community-Based Defense (RSS)

G’day mate, howsitgoing?

Handle: Avatar IRL: Karl Hanmore Rank: Senior Security Strategist (aka Sergeant Grunt) Likes: Getting the job done, bringing the fight to the bad guys, good single malt whiskey Dislikes: Cowards, talkers not doers, red tape, humidity G’day, or should Read More...

Posted Monday, December 14, 2009 7:36 PM by msrcecostrat | (Comments Off)

Filed under: EcoStrat, Community-based Defense, CERT, Security Conference Engagement, Security Ecosystem, Security Advisory, MSRC, Internet Explorer (IE), MSRC Ecosystem Strategy, Risk Assessment, Exploitability, Security Assurance, Security Bulletin, Security Research

BlueHat v9 Brings the Looking Glass To You...

Handle: C-Lizzle IRL: Celene Temkin Rank: Program Manager 2 & BlueHat Project Manager Likes: Culinary warfare, BlueHat hackers and responsible disclosure Dislikes: Acts of hubris, MySpace, orange mocha Frappaccinos! Celene here from the MSRC Ecosystem Read More...

Posted Friday, December 11, 2009 6:02 PM by msrcecostrat | (Comments Off)

Filed under: Community-based Defense, Security Conference Engagement, BlueHat Security Briefings, Security Ecosystem, MSRC, Watering Hole, Hallway Tracks, MSRC Ecosystem Strategy, Responsible Disclosure , Security Research

Ahn-young-ha-seh-yo & Kon-ni-chi-wa

Handle: Cap'n Steve IRL: Steve Adegbite Rank: Senior Security Program Manager Lead Likes: Reverse Engineering an obscene amount of code and ripping it up on a snowboard Dislikes: Not much but if you hear me growl…run Hi! It's been a while since I've had Read More...

Posted Monday, November 23, 2009 4:07 PM by msrcecostrat | (Comments Off)

Filed under: EcoStrat, Community-based Defense, Security Conference Engagement, Security Development Lifecycle (SDL), Security Ecosystem, MSRC, Conficker, FIRST, Watering Hole, Attack, Malicious Software (Malware), MSRC Ecosystem Strategy, Responsible Disclosure , Risk Assessment, Security Engineering, Security Tools, Security Intelligence Report, Security Research

Announcing BlueHat v9: Through the Looking Glass

BlueHat v9 will take place from October 21 to 23 at the Microsoft campus in Redmond. Last year, we experimented with a day dedicated to attacks and a day dedicated to SDL security mitigations. This year, we will give you the best content out there… we Read More...

Posted Monday, September 14, 2009 10:14 AM by msrcecostrat | (Comments Off)

Filed under: EcoStrat, Community-based Defense, Security Conference Engagement, BlueHat Security Briefings, Security Development Lifecycle (SDL), Security Ecosystem, Attack, Malicious Software (Malware), Microsoft Windows, MSRC Ecosystem Strategy, Responsible Disclosure , Risk Assessment, Security Engineering, Security Tools, Exploitability, Mitigations, Security Research

Threat Complexity Requires New Levels of Collaboration

When complex security issues that affect multiple vendors arise, calling them “challenging” is an understatement. We created the Microsoft Vulnerability Research Program (MSVR) to meet those challenges, learn from those experiences and strengthen the Read More...

Posted Monday, July 27, 2009 11:43 PM by msrcecostrat | (Comments Off)

Filed under: EcoStrat, Community-based Defense, Black Hat, Microsoft Vulnerability Research (MSVR), Security Ecosystem, MSRC Ecosystem Strategy, Responsible Disclosure , Security Assurance, Security Research

Community Based Defense - Redux

Handle: The Crushman IRL: Andrew Cushman Rank: Security Director Likes: Cranberry juice (thanks Jay!) Dislikes: Super helpful hotel desk clerks (thanks Raoul?) OMG it’s great to be back in Vegas again – the shows, the shopping, the nightlife, and let’s Read More...

Posted Monday, July 27, 2009 9:18 AM by msrcecostrat | (Comments Off)

Filed under: Community-based Defense, Black Hat, Exploitability Index, Microsoft Active Protections Program (MAPP), Microsoft Vulnerability Research (MSVR), Security Conference Engagement, Security Ecosystem, MSRC Ecosystem Strategy, Responsible Disclosure , Security Engineering, Exploitability, Security Assurance, Security Research

The year-end review – well, sort of :)

Posted Monday, July 27, 2009 6:08 AM by msrcecostrat | (Comments Off)

Filed under: Community-based Defense, Black Hat, Exploitability Index, Microsoft Active Protections Program (MAPP), Microsoft Vulnerability Research (MSVR), Security Conference Engagement, Security Ecosystem, Security Advisory, MSRC, MSRC Ecosystem Strategy, Responsible Disclosure , Security Engineering, Security Tools, Exploitability, Mitigations, Security Bulletin, Security Research

Black Hat USA: Hoping what happens in Vegas doesn’t actually stay in Vegas…

Handle: Security Blanki IRL: Sarah Blankinship Rank: Senior Security Strategist Lead Likes: Vuln wrangling, teams of rivals, global climate change - the hotter the better Dislikes: Slack jawed gawkers (girls are geeks too!), customers @ risk, egos Read More...

Posted Wednesday, July 22, 2009 5:27 PM by msrcecostrat | (Comments Off)

Filed under: Community-based Defense, Black Hat, Security Conference Engagement, Security Ecosystem, MSRC Ecosystem Strategy

心の会合: The Gathering

Posted Friday, July 17, 2009 1:00 PM by msrcecostrat | (Comments Off)

Filed under: Community-based Defense, Security Conference Engagement, Security Ecosystem, MMPC, FIRST, Watering Hole, Hallway Tracks, Attack, MSRC Ecosystem Strategy

A Brussels retrospective from Oahu

Posted Friday, June 12, 2009 8:31 AM by msrcecostrat | (Comments Off)

Filed under: EcoStrat, Community-based Defense, Security Conference Engagement, BlueHat Security Briefings, Security Ecosystem, Attack, MSRC Ecosystem Strategy, Defense-in-depth

Announcing the BlueHat Security Forum: EU Edition

Posted Tuesday, June 02, 2009 9:30 AM by msrcecostrat | 1 Comments

Filed under: EcoStrat, Community-based Defense, Security Conference Engagement, BlueHat Security Briefings, Security Development Lifecycle (SDL), Security Ecosystem, MSRC, Watering Hole, Attack, Malicious Software (Malware), MSRC Ecosystem Strategy, Security Research

Chills and Thrills at FIRST

Sveika! Hey Steve here, been a while since I posted on the EcoStrat blog. With all the security events that happened during the latter half of 2008, I have been very focused on working with the security update releases and Microsoft Active Protections Read More...

Posted Wednesday, February 11, 2009 6:00 AM by msrcecostrat | (Comments Off)

Filed under: EcoStrat, Community-based Defense, Black Hat, Microsoft Active Protections Program (MAPP), Security Conference Engagement, MS08-067, Security Ecosystem, Security Advisory, MSRC, MMPC, Conficker, CanSecWest, FIRST, Watering Hole

Constants and Change

Microsoft has been talking about community-based defense for some time now. This week, I want to provide a personal dimension to the campaign, and give an update on recent activities. Curiously, as I started to write this post, a couple of phrases popped Read More...

Posted Tuesday, February 03, 2009 8:00 AM by msrcecostrat | 1 Comments

Filed under: Community-based Defense, Exploitability Index, Microsoft Active Protections Program (MAPP), Microsoft Vulnerability Research (MSVR), CERT, Security Conference Engagement, Security Ecosystem, ICASI

MS08-067: Example of Need for Increased Collaboration

Posted Thursday, October 23, 2008 3:05 PM by msrcecostrat | (Comments Off)

Filed under: Community-based Defense, Black Hat, Microsoft Active Protections Program (MAPP), MS08-067

The Valley Between Black & Blue

Handle: C-Lizzle IRL: Celene Temkin Rank: BlueHat Project Manager Likes: Culinary warfare, BlueHat hackers and responsible disclosure Dislikes: Acts of hubris, MySpace, orange mocha Frappaccinos! I affectionately call this time between summer conferences, Read More...

Posted Thursday, August 21, 2008 6:05 PM by msrcecostrat | (Comments Off)

Filed under: Community-based Defense, Black Hat, Security Conference Engagement, BlueHat Security Briefings, Security Ecosystem