Author Archives: FanGirl1

Microsoft Paladin – Automated Vulnerability Analysis

This is a good post from Microsoft’s Threat Research & Response Blog (on the Microsoft Malware Protection Center site), hinting at their technology to speed the analysis of vulnerabilities. Its a toolset called Paladin. From the blog post:

The motivation behind this work is to automate the otherwise laborious process of analyzing exploits, indentifying malicious input bytes quickly, identification of how shell code is executed and, basically, to narrow the search space for further manual analysis. The ability to respond quickly to an emerging threat event is critical in our space. It is with all of this in mind that we have created a toolset we refer to as Paladin which helps support rapid and scalable vulnerability analysis.

Source: Threat Research & Response Blog

This is research only at this point, although it is making its way into the next beta version of the Forefront Threat Management Gateway product.

A timely response to threats is exactly what’s needed (see our last post), and this technology sounds like a step in the right direction.

For more about Microsoft Forefront Security tools click here.

Microsoft Forefront

(via One Microsoft Way)

Unified Communications 2.0

Hi there everyone and welcome to my first post – I’m really excited to be writing for Microsoft Confidential.

You may have read about Microsoft’s latest Unified Communications update: Office Communications Server 2007 R2. It will be available for purchase in February 2009. The full launch details are available here.

This release is an update to the Office Communications Server release only 12 months ago. Microsoft has worked hard to get a new release out so quickly. This is perhaps indicative of the huge potential the product has.

The focus of this release has been on improving the ease at which users can be moved onto a VoIP system, and away from the traditional private branch exchange (PBX) architectures. The TMCnet bloggers went as far as to say this was the sounding of the death knell for PBX.

The new version includes the following key features:

Next-Generation Collaboration

. Dial-in audioconferencing. Office Communications Server 2007 R2 enables businesses to eliminate costly audioconferencing services with an on-premise audioconferencing bridge that is managed by IT as part of the overall communications infrastructure.

. Desktop sharing. This feature enables users to seamlessly share their desktop, initiate audio communications and collaborate with others outside the organization on PC, Macintosh or Linux platforms through a Web-based interface.

. Persistent group chat. This enables geographically dispersed teams to collaborate with each other by participating in topic-based discussions that persist over time. This application provides users with a list of all available chat rooms and topics, periodically archives discussions in an XML file format that meets compliance regulations, provides tools to search the entire history of discussion on a given topic, and offers filters and alerts to notify someone of new posts or topics on a particular topic.

Enhanced Voice and Mobility

. Attendant console and delegation. This allows receptionists, team secretaries and others to manage calls and conferences on behalf of other users, set up workflows to route calls, and manage higher volumes of incoming communications through a software-based interface.

. Session Initiation Protocol trunking. This feature enables businesses to reduce costs by setting up a direct VoIP connection between an Internet telephony service provider and Office Communicator 2007 without requiring on-premise gateways.

. Response group.A workflow design application manages incoming calls based on user-configured rules (e.g., round-robin, longest idle, simultaneous), providing a simple-to-use basic engine for call treatment, routing and queuing.

. Mobility and single-number reach. This extends Microsoft Office Communicator Mobile functionality to Nokia S40, Motorola RAZR, Blackberry and Windows Mobile platforms, allowing users to communicate using presence, IM and voice as an extension of their PBX from a unified client.*

New Developer Tools for Business Applications

. APIs and Visual Studio integration. This improves the efficiency of everyday business processes by enabling businesses to build communications-enabled applications and embed communications into business applications.

Source: Microsoft PressPass

The main items of interest for us are the tools for collaboration, and the developer APIs.

Over on DevSource, there was a quick interview with Jim Rapoza discussing how far Unified Communications and Web 2.0 would integrate. There seems to be a lot of potential for the two to provide value in the enterprise.