News

Analyst Firm Questions Security of Windows 2003 for Critical Applications

In a new report on Windows Server 2003 security, an analyst firm argues that while Microsoft made clear progress on the security of its flagship server operating system, Unix and Linux remain better choices for mission critical applications.

The security conclusion reached by the Burton Group is based primarily on the common argument that Windows' attractiveness as an attack target makes it disproportionately vulnerable.

"Because they are not the target of many large-scale attacks, other operating systems such as Linux and Unix are more appropriate for mission-critical enterprise applications that contain sensitive data," research director Daniel Blum said in a statement.

Blum added that Linux and Unix have their vulnerabilities, too. "Consequently, using Linux or Unix does nothing to eliminate the requirement for diligent efforts to secure them against misconfiguration and attacks," he said.

The report found several positives, including centralized policy management and distributed authentication. But Burton's Blum lumped together several negatives other than large-scale attacks, including the operating system's size, complexity and continued support for interfaces such as ActiveX.

"To its credit, Microsoft has demonstrated willingness to sacrifice some backward compatibility for security," Blum said. "However, 2003's rash of successful exploits, including the notorious Blaster and SoBig attacks erased much of the good will Microsoft had begun to build with customers."

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft and SAP Enhance Partnership with Teams Integration

    Microsoft and SAP this week described continuing partnership efforts on Microsoft Azure, while also planning a Microsoft Teams integration with SAP's enterprise resource planning product and other solutions.

  • Blue Squares Graphic

    Microsoft Previews Azure IoT Edge for Linux on Windows

    Microsoft announced a preview of Azure IoT Edge for Linux on Windows, which lets organizations tap Linux virtual machine processes that also work with Windows- and Azure-based processes and services.

  • How To Automate Tasks in Azure SQL Database

    Knowing how to automate tasks in the cloud will make you a more productive DBA. Here are the key concepts to understand about cloud scripting and a rundown of the best tools for automating code in Azure.

  • Microsoft Open License To End Next Year for Government and Education Groups

    Microsoft's "Open License program" will end on Jan. 1, 2022, and not just for commercial customers, but also for government, education and nonprofit organizations.

comments powered by Disqus