Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

A Look at Microsoft's Security War Room

Posted by CmdrTaco on Mon Dec 03, 2007 10:41 AM
from the but-can-they-call-jack-bauer dept.
Josh Fink writes "C|Net has an interesting piece about Microsoft's Security War Room, or rather, shall I say rooms. This room came about when Microsoft's security chief, Mike Nash, had issues finding open conference rooms. The response; a dedicated room only for him and his staff to handle emergencies. "And while he was at it, why not have two? That way, the folks working on fixing a security crisis could have a little breathing room from those drafting the public and customer communications around the issue. ""
+ -
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by mseidl (828824) * on Monday December 03 2007, @10:42AM (#21560331) Homepage
    "No Penguins Allowed"
    • by PPH (736903) on Monday December 03 2007, @12:15PM (#21561317)
      That's on the front door only. How many back doors do these rooms have?
    • Please wear a helmet; look out for flying chairs.
    • Re:on the door? (Score:5, Interesting)

      by Anonymous Coward on Monday December 03 2007, @01:37PM (#21562415)

      I'm posting anonymously because of NDA implications. I used to work at a network security firm that supplied MS with a security console for detecting, investigating, and mitigating attacks on their network. (Hint, they use the same one as the Pentagon's network security war room.) This system relied upon certain defacto standards in their networking gear, but MS had purchased gear that did not support that feature, and were blocking much of their gear that did. MS's proposed solution, distribute a few hundred Linux boxes all through their network to serve as probes.

      It was an unworkable idea, and we eventually worked around their problems in a different way, but it does indicate that some of the head security guys at MS may not be as opposed to Linux as you'd think. So long as they don't have to make it public, they seem happy to use OSS. Note, the servers that provide their security system run a highly customized version of either OpenBSD or Linux, depending on which version they're using.

  • Anyone notice that all the swivel chairs are bolted to the ground? I wonder why they made them fixed and permanent.
    • Well, we all know that freedom of movement is something that needs to be taken seriously. Either that or they liked the idea from the Enterprise bridge... Just imagine Data and Wesley crusher pushing eachother around on rollable chairs... It would have brought havoc to the Enterprise and Picard would be forced to sick Worf on them... Maybe they just want to avoid Klingons destroying their security people? I dunno? Stationary employees are more well behaved and productive employees?
    • It's because there's no fighting in the War Room!
    • Heh. After a few minutes of looking at heavily zoomed in pic 4 (they don't seem bolted on), I got the ballmer/chair joke. Well done, sir, well done.
    • dunno, but the ripped up sections of floor suggest it wasn't terribly effective at keeping the floors and chairs connected. It must have been a powerful and angry force that removed them...
  • by gerf (532474) <edtgerf@gmail.com> on Monday December 03 2007, @10:46AM (#21560365) Journal
    Viruses, backdoors, security holes, buffer overflows, trojans galore... and they get a room. Ooooh, they're so dedicated to security!
  • by BadAnalogyGuy (945258) <BadAnalogyGuy@gmail.com> on Monday December 03 2007, @10:47AM (#21560381)
    They have a big sign out front indicating security, but they don't even have locks on the kitchen cabinets.
  • ...any windows there... ;)
  • Microsoft's top engineers relentlessly persue their war on security.
    • by Locutus (9039) on Monday December 03 2007, @11:29AM (#21560783)
      Didn't Bill Gates declare essentially, 'Mission Accomplished', when they shipped Windows 2000? You know, saying it was the most secure version of Windows. Then again when Windows XP shipped and the grand finale when he declared Windows Vista as the most secure OS available. That's right, not the most secure version of Windows, but the most secure OS available!

      Is he retiring from Microsoft to run for President? He's got the ethics to do so. IMO.

      LoB
  • Two rooms (Score:5, Funny)

    by ShiningSomething (1097589) on Monday December 03 2007, @11:06AM (#21560561)
    When I read there were two rooms, my first reaction was: one to work on the current security threat, a second to work on the security threats created by the first one...
  • by MiniMike (234881) on Monday December 03 2007, @11:08AM (#21560581)
    It's a backup for when the first room crashes!
  • by Iphtashu Fitz (263795) on Monday December 03 2007, @11:09AM (#21560585)
    In the cabinet containing food supplies it looks like they have the following available:
    • a bag of pretzels
    • a couple bottles of hersheys chocolate syrup
    • one can of soda or juice
    • a couple containers of nondairy creamer
    • 3 bottles that look like liquor bottles
    All that to feed a group of engineers that "gets hit with an emergency and has to pull an all-nighter."

    Sounds like a typical geek diet to me.
  • Post-op greasy haired poster-tranny 'Ina Fried' ....talk about needing a junk filter. Toss this 'reporter' out along w/goatse.
  • War rooms... (Score:3, Informative)

    by aicrules (819392) on Monday December 03 2007, @11:12AM (#21560611)
    it's nice that it's so clearly stated exactly why there is this "war room". We have similar requests by various teams in our organization as if a war room is some amazing thing that you just can't live without. In reality it's almost always because some asshat can't be bothered to book meeting rooms in advance. If all the rooms are always booked, add more rooms. What you end up with is a room that no one else can use and except in dire situations, no one is using at ALL.
    • Microsoft is building and acquiring more office space in the Redmond/Bellevue/Seattle area, but there has been an ongoing shortage of meeting rooms for years. Mike Nash made sure that the security response team had space when they needed it. Is it an optimal use of space? No, but it is a reasonable one. For security reasons, the rooms are inacessible to normal MS staff, vendors, and visitors. Non-security response team members are admitted on a as-needed basis.
    • Yep, typical land-grab by one group pleading "special needs" to take resources away from the rest of the organization.
  • by christurkel (520220) on Monday December 03 2007, @11:18AM (#21560679) Homepage Journal
    There is no one in those rooms!
  • Disappointed (Score:5, Interesting)

    by hcdejong (561314) <{ln.tensmx} {ta} {emca}> on Monday December 03 2007, @11:18AM (#21560681)
    I expected this [gonet.cz], not some crummy office with a conference table.
  • Why do I get a vision of Jack Bauer taking orders from Bill Gates to wipe some Chinese online terrorists off the map from some CTU-like complex?
    • Considering how many moles are in CTU, I definitely see the resemblence to Microsoft security.
    • Re: (Score:3, Insightful)

      Why do I get a vision of Jack Bauer taking orders from Bill Gates to wipe some Chinese online terrorists off the map from some CTU-like complex?

      Because you watch too much TV?
  • So it's not like the Maytag commercials where the old repair guy is reading a newspaper and bored for lack of work?
  • "You can't patch in here, this is the Microsoft Security War Room!"
  • I've been in a few war rooms, control centers, command centers, etc etc etc over the years. Even helped design one a little. 4 Flat screens is all they've got? Four? That's no war room. Scuffle closet maybe?
  • What a non-story (Score:4, Insightful)

    by InlawBiker (1124825) on Monday December 03 2007, @11:45AM (#21560951)
    Seriously, a few photos of a conference room? And Harvey Keitel and an espresso machine? This is just a room where people sit down to discuss issues. Just like in every office everywhere in the world, except this one has some TVs on the wall. Can I please have that 10 minutes of my life back?
  • by zerofoo (262795) on Monday December 03 2007, @11:53AM (#21561051)
    It seems fitting they have a picture of Harvey Keitel playing The Wolf character from Pulp Fiction hung on the wall.

    I've had to clean up after a large scale Microsoft failure a few times, and it the whole process did seem like going on "Brain Detail" in the back of a car.

    -ted
    • TFA introduces the term "Security War Room", not Slashdot. (It's clear from the article that Microsoft has a less silly name for it.)
    • Re:war room? (Score:5, Informative)

      by Geste (527302) on Monday December 03 2007, @11:12AM (#21560619)
      "Is it just me or is slashdot's headlines as of late running parallel to the average idiots way of describing everything as a war?"

      In somebody's defense, they probably just picked up the concept and terminology from large telcos. If you go to a large network operations center (say like what AT&T operates in Piscataway, NJ) you will find two or more good-sized conference rooms provisioned with 10-15 workstations each that sit idle 99 percent of the time. Just used in cases of major outages/problems or sometimes for network upgrades. Known as the "war rooms" for as long as I am aware.

    • by stranger_to_himself (1132241) on Monday December 03 2007, @11:31AM (#21560803) Journal
      I am interested in joining your war on the inappropriate use of the word 'war'.
    • by ByOhTek (1181381) on Monday December 03 2007, @11:05AM (#21560553) Journal
      One dedicated fix team for all that code?

      That wouldn't make sense at all, there's too much for anyone to grasp. It would be like a dedicated fix team that cover Linux+KDE+OpenOffice. (replace Linux with OpenSolaris or *BSD if you like, KDE with Gnome or some other high-feature window/session/desktop manager if you like)

      It's to complex to keep aware of the ins-and-outs of everything - just one of those would be hard enough. Each project should have their own dedicated fix team - The top-string regular devs for the project (hence they understand the code), maybe one or two outsiders (another perspective), who normally work on the specific project, but drop everything and work on fixes if they occur.

      Also, it never said that they didn't (or for that matter, did) already have a dedicated team then (or now), simply that until '05, they had to share conference rooms.
      • by VE3MTM (635378) on Monday December 03 2007, @01:21PM (#21562189)
        I'm sure they're vastly simplifying their processes. This seems to just be a triage centre (and a fairly rudimentary one too). I doubt the actual fixing takes place here, rather just co-ordinating that process.
    • There was one bag of corn chips and a bag of pretzels. This is how a billion dollar company prepares to supply their security response team for all-nighters? shaking my head... They probably have an 24/7 dinning area like Google has but then again, the caption was just silly given the contents shown.

      LoB
    • Re: (Score:3, Insightful)

      Tired of having to fight for a free conference room, Microsoft's security chief, Mike Nash, decided in early 2005 that the company needed a dedicated "war room" where his team could handle emergency responses.
      ...
      The Microsoft Security Response Center (MSRC) was completed in June 2005.

      Why would anyone shill 2+ year old "news"?