Security Vendors Raise Concerns About Vista

By Brian Turner

The emphasis Microsoft has placed on security in its new Vista operating system has raised concerns among an increasing number of outside security vendors.

Security companies have warned that consumers and businesses could be vulnerable if they have to rely exclusively on Microsoft’s built-in “Patchguard” security system.

Vendors are concerned that Microsoft has refused to allow them to attach their products, which they consider superior to Microsoft’s security technology, to the software kernel that is the core of the Vista operating system.

While third-party security companies are worried about losing market share and revenues to Microsoft, they are also concerned about the general security of computer users.

Mikhail Penkovsky, vice president of security software company Agnitum Ltd said that Microsoft’s new approach was “like buying new door locks for everybody’s house in all of your city - you are improving security … but as soon as one bad guy discovers how to break inside one house, they will be able to break into every house in your city.”

Some companies have designed methods of circumventing Patchguard to ensure their products will still work in the future.

Authentium Inc has developed a method of attaching its VirtualATM(cq) electronic commerce product directly to Vista’s software kernel in early trial versions of the operating system. Authentium claims that by walling off the kernel, Vista is also excluding companies that can help protect users.

Jim Allchin, Microsoft’s co-president for platforms and services, said the company closed access to the kernel in Vista because that was the most effective way of making the system secure.

Microsoft and third-party security companies are working on solutions to the dispute and it is hoped that the issue will be resolved when Microsoft issues the first “service pack” update to Vista, probably in a year or so.