Microsoft Beefs Up Office Security

With Office becoming an ever-increasing target for malware writers, Microsoft is offering a tool and guidance to help improve the security of Office 2007 and 2003.

The Office 2007 Security Guide will be posted on Microsoft’s TechEd site on Tuesday and formally introduced at the Microsoft TechEd conference this week in Barcelona, Spain. The guide will offer detailed documentation for securing Office 2007 applications to protect against specially written document files with malicious code hidden within them.

Such security has become a necessity as Office becomes a more frequent target of attacks. As Microsoft has hardened its operating system, the bad guys have gone for the low-hanging fruit and started looking in the application layer. Distribution of Word, Excel and PowerPoint files with hidden code to exploit vulnerabilities have been on the increase in recent months.

“It’s kind of a unique approach in that [security] has been the purview of the operating system,” Joshua Edwards, technical product manager for Office, told InternetNews.com. “But given the trend we’ve seen over the past few years moving from the OS level to the app layer, this was part of the design approach we’ve taken with Office 2007.”

Microsoft will also introduce the Group Policy Object Accelerator, a free tool that helps administrators set and change the security policies in Office across a network through Active Directory.

Microsoft has offered some measure of security in previous versions of its productivity suite, but Office 2007 is considerably more intricate and fine grained in its security. It has twice as many group policy and directory controls as Office 2003 and a total of 5,731 registry and policy setting, according to Edwards.

“Going through all those would be a painstaking process, so we’ve identified the 300 controls most related to security,” he said. “Everyone has a level of security and information privacy that they feel is appropriate. In the past, we’ve provided a baseline of security recommendations and guidance. But for the first time, we have built policy controls into the product itself.”

The tool and guide allow for locking down the application by not allowing it to save to certain locations, make Web transactions or run macros except from trusted sources.

This article was first published on InternetNews.com. To read the full article, click here.

RELATED NEWS AND ANALYSIS

• Huawei’s AI Update: Things Are Moving Faster Than We Think

  FEATURE |  By Rob Enderle,
  December 04, 2020

• Keeping Machine Learning Algorithms Honest in the ‘Ethics-First’ Era

  ARTIFICIAL INTELLIGENCE |  By Guest Author,
  November 18, 2020

• Key Trends in Chatbots and RPA

  FEATURE |  By Guest Author,
  November 10, 2020

• Top 10 AIOps Companies

  FEATURE |  By Samuel Greengard,
  November 05, 2020

• What is Text Analysis?

  ARTIFICIAL INTELLIGENCE |  By Guest Author,
  November 02, 2020

• How Intel’s Work With Autonomous Cars Could Redefine General Purpose AI

  ARTIFICIAL INTELLIGENCE |  By Rob Enderle,
  October 29, 2020

• Dell Technologies World: Weaving Together Human And Machine Interaction For AI And Robotics

  ARTIFICIAL INTELLIGENCE |  By Rob Enderle,
  October 23, 2020

• The Super Moderator, or How IBM Project Debater Could Save Social Media

  FEATURE |  By Rob Enderle,
  October 16, 2020

• Top 10 Chatbot Platforms

  FEATURE |  By Cynthia Harvey,
  October 07, 2020

• Finding a Career Path in AI

  ARTIFICIAL INTELLIGENCE |  By Guest Author,
  October 05, 2020

• CIOs Discuss the Promise of AI and Data Science

  FEATURE |  By Guest Author,
  September 25, 2020

• Microsoft Is Building An AI Product That Could Predict The Future

  FEATURE |  By Rob Enderle,
  September 25, 2020

• Top 10 Machine Learning Companies 2020

  FEATURE |  By Cynthia Harvey,
  September 22, 2020

• NVIDIA and ARM: Massively Changing The AI Landscape

  ARTIFICIAL INTELLIGENCE |  By Rob Enderle,
  September 18, 2020

• Continuous Intelligence: Expert Discussion [Video and Podcast]

  ARTIFICIAL INTELLIGENCE |  By James Maguire,
  September 14, 2020

• Artificial Intelligence: Governance and Ethics [Video]

  ARTIFICIAL INTELLIGENCE |  By James Maguire,
  September 13, 2020

• IBM Watson At The US Open: Showcasing The Power Of A Mature Enterprise-Class AI

  FEATURE |  By Rob Enderle,
  September 11, 2020

• Artificial Intelligence: Perception vs. Reality

  FEATURE |  By James Maguire,
  September 09, 2020

• Anticipating The Coming Wave Of AI Enhanced PCs

  FEATURE |  By Rob Enderle,
  September 05, 2020

• The Critical Nature Of IBM’s NLP (Natural Language Processing) Effort

  ARTIFICIAL INTELLIGENCE |  By Rob Enderle,
  August 14, 2020