Microsoft
Microsoft has restructured its approach to security in the latest release of Office

Microsoft attempts to lock down Office

Company touts new security features, but experts question effectiveness

Written by Shaun Nichols in California

Microsoft is touting a new set of security features designed to lock down Word and Excel. The software giant said it hopes the move will end Office's run as a favourite target of malware authors and remote attackers.

Josh Edwards, technical product manager for Microsoft Office, explained in an interview with vnunet.com that Microsoft completely restructured the way it approaches security in the latest release of Office. 

Advertisement

Edwards said that the new approach began three years ago when the company realised that it had to make security a central priority.

"The idea was how we could integrate security in such a way that it is not a feature, but more of a philosophy," he said.

In order to shift security to centre stage, Microsoft took several steps to ensure that security research was integrated into the development process for Office.

Edwards said that the company brought in outside researchers to find weaknesses, and required its project managers to become proficient in security.

The renewed focus on security for Office is well timed. Increasingly sophisticated attackers have shifted much of their focus from vulnerabilities within Windows to applications such as Excel and Office.  

"Every file type, every application that is broadly used, is facing the same situation right now," said Edwards.

"Office, being a commonly used application, has received a lot of that attention, and has driven a lot of the things we're doing with security."

One these measures is the move to the OpenXML document format. The new format stores different parts of the document separately, keeping formatting and document information away from the actual data itself.

Microsoft hopes that OpenXML will make it easier for security software to isolate the areas where malicious code may be located and remove exploits placed within documents.

Tags:

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Windows 7 screenshot

Microsoft defends choice of 'Windows 7'

But still does not satisfy Windows followers   More...

Apple MacBook

Apple rolls out new MacBooks

New case design and lower prices   More...

Novell UK office

Novell snaps up Managed Objects

Acquisition adds performance monitoring to Novell datacentre range   More...

Storage Expo

Better storage management key to success

Resource optimisation can offer a range of benefits, claims HP   More...

Primary Navigation