Shulou(Shulou.com)11/24 Report--

CTOnews.com, November 3, Microsoft President Brad Smith yesterday introduced Microsoft's Future Security Initiative (Secure Future Initiative), claiming that Microsoft will proceed from three aspects to promote a "new world of security", including focusing on AI-based security defense, strengthening basic software engineering, and introducing more secure international norms, among which the first two aspects involve changes in Microsoft's internal security design.

Brad Smith claimed that Microsoft has come to the conclusion in recent months that the speed, scale and complexity of hackers' attacks using the network are increasing, so new measures are needed to pursue "a new generation of network security protection." as a result, the Future Security Initiative was born.

According to Microsoft, 40% of "national hacker" attacks in the past two years have mainly targeted major infrastructure, such as power grids, water supply systems or medical institutions, with dire consequences of service disruptions in these industries; the 123 "ransomware as a service" hacker teams tracked by Microsoft have increased the number of attacks by more than 200% since September last year.

▲ source Microsoft in addition, the focus of Microsoft's "secure Future Initiative" also includes AI, Microsoft believes that AI will completely subvert the "traditional rules of the game" of network security. This is because ubiquitous, continuously connected user devices have built up vast amounts of data, making it difficult for traditional manpower to detect traditional cyber attacks, but AI can play the role of "looking for a needle in a haystack".

CTOnews.com found that Microsoft plans to use the speed of AI to defeat cyber attacks because AI detects cyber attacks so fast that it is difficult for hacker groups to carry out decentralized attacks. Security Copilot, currently being tested by Microsoft, integrates a large language model and a security model, which can prevent hackers from attacking at the best speed.

Charlie Bell, vice president of Microsoft Security, Microsoft, ▲ source, detailed the related changes in Microsoft's internal software engineering, including the transformation of software development, the adoption of new user token verification measures, and speeding up the rapid repair of vulnerabilities.

Charlie Bell said Microsoft would use "automation" and "AI" to accelerate threat modeling and expand the use of security languages such as C #, Python, Java and Rust to improve security and eliminate traditional vulnerabilities at the programming language level. Microsoft expects the time needed to ease cloud vulnerabilities to be reduced by at least 50% in the future.

The last item of Microsoft's Future Security Initiative is international norms. In fact, in 2017, Microsoft called on the world to develop the Digital Geneva Convention (Digital Geneva Convention) to regulate the code of conduct in cyberspace.

▲ Touyuan Microsoft Brad Smith reiterated that all countries and regions should make a public commitment not to plant loopholes in critical infrastructure such as energy, water, food and health care, and to regard cloud services as major infrastructure.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.