The press release stated that Microsoft and CrowdStrike will come together with key partners who provide endpoint security technology to discuss how to improve recovery capabilities and protect the critical infrastructure of their shared customers. In July, computers around the world using Microsoft Windows crashed due to a security software update from CrowdStrike, resulting in a widespread blue screen of death failure.
On Friday, August 23rd, local time, it was announced on the official blog that the Windows Endpoint Security Ecosystem Summit will be held on September 10th at the headquarters in Redmond, Washington. $Microsoft (MSFT.US)$ The press release stated that Microsoft and a cybersecurity company will come together with key partners who provide endpoint security technology to discuss how to improve recovery capabilities and protect the critical infrastructure of their shared customers.
Microsoft mentioned, 'The recent CrowdStrike failure has provided us with important lessons for our ecosystem, and our discussions will focus on improving security and security deployment practices, designing resilient systems, and exploring ways of collaboration to provide the best service.' $CrowdStrike (CRWD.US)$ The press release stated that Microsoft and CrowdStrike will come together with key partners who provide endpoint security technology to discuss how to improve recovery capabilities and protect the critical infrastructure of their shared customers.
'The recent CrowdStrike failure has provided us with important lessons for our ecosystem, and our discussions will focus on improving security and security deployment practices, designing resilient systems, and exploring ways of collaboration to provide the best service,' Microsoft mentioned.
In July, computers worldwide that use Microsoft Windows experienced a massive blue screen crash due to an update of the cybersecurity software, CrowdStrike, causing disruptions in various industries such as aviation, railroads, marine transportation, finance, medical, and hospitality.
The work and lives of numerous businesses and individual users were severely disrupted. Delta Air Lines CEO, Bastian, stated that this "largest IT failure in history" resulted in thousands of stranded customers and a loss of $0.5 billion for the company.
Microsoft executives revealed to the media that the purpose of this meeting is to discuss how to prevent similar issues in the future. Participants will explore the possibility of applications relying more on user mode rather than the more advanced kernel mode, which is heavily dependent on Windows.
Applications in user mode are isolated, meaning that if one crashes, other applications will not be affected. However, if an application in kernel mode fails, it can result in the entire Windows system crashing.
However, to achieve effective protection, security products need to use more low-level drivers and kernel technologies to implement preemptive defense against attackers. Therefore, endpoint protection software like CrowdStrike, Check Point, and SentinelOne rely on kernel mode.
Previously, Apple had restricted kernel access in macOS and discouraged developers from using kernel extensions. In response to this, the unnamed Microsoft executive stated that removing kernel access in Windows would only solve a small portion of potential issues.
Microsoft executives also revealed that the event on September 10 will discuss the use of eBPF (Extended Berkeley Packet Filter) technology and memory safe programming languages such as Rust. Last year, Microsoft donated 1 million US dollars to the Rust Foundation.
The press release also added that in addition to ecosystem partners, Microsoft will also invite government representatives to attend the meeting to ensure the highest transparency of community cooperation. It is expected that the Windows Endpoint Security Ecosystem Summit will promote short-term and long-term actions and initiatives.
Editor/Somer