PAIMEIdiff: keeping Microsoft honest on patch Tuesdays
Peter Silberman, Marsha Zaidman · Journal of computing sciences in colleges · 2007
On the second Tuesday of each month Microsoft releases critical patches to it software. Companies that develop Host Intrusion Prevention Software (HIPS) and Intrusion Prevention Software (IPS) need to know specific details about the patches and more importantly about the vulnerable code being patched so the companies can protect their customers. Microsoft's practice, however is to silently fix vulnerabilities that they find in house (these are vulnerabilities that were not reported to Microsoft by a third party), instead of publicly announcing that a vulnerability was found. The poster at these proceedings will show silently patched vulnerabilities in MS06--025 that were identified by Peter Silberman.