none
PEN testing RRS feed

  • Question

  •  

    Has OCS 2007 Speech Server been PEN tested?  This came from sales.  I am guessing they mean penetration testing, like for networks, web servers, etc.
    Wednesday, August 22, 2007 4:04 PM

Answers

  • I have seen nothing indicate that a formal (external) pen test (yes pen == penetration) has been undertaken. To some degree, even if MS had done so, a real penetration test has to include the entire platform, not just OCS. That is, it has to include your AD, firewalls, proxies, etc.
    Wednesday, August 22, 2007 4:31 PM

All replies

  • I have seen nothing indicate that a formal (external) pen test (yes pen == penetration) has been undertaken. To some degree, even if MS had done so, a real penetration test has to include the entire platform, not just OCS. That is, it has to include your AD, firewalls, proxies, etc.
    Wednesday, August 22, 2007 4:31 PM
  •  

    Thanks Thomas - this is pretty much what I had been leaning towards also.
    Wednesday, August 22, 2007 5:29 PM
  • Hi Phil,

     

    Both Speech Server and OCS have been developed using the Microsoft Security Development Lifecycle process (see http://msdn2.microsoft.com/en-us/library/ms995349.aspx for a description). As part of that process we have done extensive internal security testing and also contracted with a 3rd party specialist penetration testing company to do some additional testing.

     

    Thursday, August 30, 2007 8:17 PM
  • <form action="http://www.reddit.com/user/kevinmdesq/#" class="usertext" id="form-t1_cfu4lkwzm2" style="margin-margin-right:0px;margin-bottom:0px;margin-padding-padding-right:0px;padding-bottom:0px;padding-font-size:small;">

    Essentially the OneNote 2014 user agreement (and looks like they've added this agreement when you go to use all Microsoft's products) now says that Microsoft can be aware that their products are defective and you have no legal rights except to recup. "5 dollars" back from this Co.. Trust Microsoft? Dahh! A law not so different from "the lemon law" is neded, wouldn't you say?

    </form>

          You might want to consider visiting the OneNote Community Forum if you wish to discuss OneNote.

    Carey Frisch

    Tuesday, March 4, 2014 6:48 PM