Microsoft released the annual Microsoft Security Response Center (MSRC) progress report today. This paper provides a behind-the-scenes look into some of the work the MSRC team has done over the past year.
Specifically, the report highlights:
· Data from the Microsoft Exploitability Index, including a breakdown of the ratings numbers since the Index launched in October 2008 and analysis of how the Exploitability Index can help reduce the need to urgently deploy some security updates.
· Updates to the Microsoft Active Protections Program (MAPP), including testimonials from MAPP partners.
· Behind-the-scenes look into Microsoft Vulnerability Research (MSVR), including how the company investigates third-party vulnerabilities and coordinates the release of security updates.
· A summary of the announcements made about Coordinated Vulnerability Disclosure (CVD) over the past year, including customer testimonials about CVD.