|
The
security enhancements in Windows 7 will enable Microsoft to put up a
stronger fight against competing operating systems but they will not
replace traditional layers of security for corporate networks. These
are the claims of one senior technologist at Internet security firm
Sophos.
In a podcast interview, James Lyne analysed various aspects of
Microsoft’s new operating system, due for release later this year,
and concluded that whilst it contains elements that may deliver real
value to certain users, Windows 7 is not able to single-handedly
protect companies from security threats and data leakage.
Windows Firewall
The
Windows 7 firewall policy model is much stronger than its Vista
predecessor and now includes bidirectional filtering as well as
multiple locations so that a user may differentiate between browsing
in Starbucks or at home. But Lyne points out that businesses need to
consolidate their security management into one central location and
is sceptical as to whether companies would choose a Windows 7
firewall over a global network policy.
UAC (User Account Control)
The
notoriously intrusive UAC feature in Vista, which continually asks
the user to approve such actions as installing unknown devices and
software, is still present in Windows 7 but is less conspicuous.
However, Lyne states that any user authorisation policy is
ultimately flawed because the user is rarely qualified to identify a
potential threat.
Lyne comments: “What’s required is a more centrally defined policy
that says what is good and bad on a computer. Why should the
secretary or the guy sitting there doing his accounts have to be an
expert in whether XYZ application can access this arbitrary location
in the registry.”
|
