Federal Drive

Computer-security event seeks common ground

Business Software Alliance Releases Guide to Help Nations Craft Cyber Policies, Microsoft Issues Workaround For Serious SharePoint Vulnerability

Federal News Network Staff

May 3, 2010 8:43 am

2 min read

Cybersecurity Update – Tune in weekdays at 30 minutes past the hour for the latest cybersecurity news on The Federal Drive with Tom Temin and Jane Norris (6-10 a.m.) and The Daily Debrief with Chris Dorobek and Amy Morris (3-7 p.m.). Listen live at FederalNewsRadio.com or on the radio at 1500 and 820 AM in the Washington, D.C. metro area.

It’s estimated that more than 1 billion computers are connected to the Internet. And this week in Dallas, an international effort is being launched in an effort to keep those machines safe. The Worldwide Cybersecurity Summit is aimed at exchanging ideas on how to protect the Internet from attacks on computer systems. While the aim of the conference may seem to be a simple one, getting it together has been anything but. Lieutenant General Harry Raduege Jr. is the former head of the federal agency responsible for securing communications technology for both the military and the president. He notes that those who handle such sensitive matters are reluctant to reach out to others, because they may not feel comfortable about the motives of those asking questions.
There is a new voice in the cyber security conversation. The Business Software Alliance (BSA) has just released their Global Cybersecurity Framework. The framework is designed to provide guidance for nations seeking to develop coherent and effective cybersecurity policies. The New New internet reports, the framework includes guidance on trust, innovation, policy and international standards. It provides a systematic, 12 point plan that nations can follow to implement the principles contained in the framework.
Microsoft has found a temporary fix for their SharePoint vulnerability. Last week High-Tech Bridge published a security note detailing a cross-site scripting vulnerability in SharePoint, which makes it possible for attackers to insert and execute JavaScript code of their choice on a system through a browser. This led to fear that SharePoint would become a major target for cyber hackers looking for personal information. Information Week says, Microsoft has created a short-term work-around that requires running a number of commands from the command prompt to shut down access to the at-risk part of the system. Microsoft is looking for a permanent solution.