Jeff Jones at CSO posted his 6 Month Vulnerability Report for Windows Vista. The report is a 14 page PDF file breaking down various metrics related to security issues in each of the major OS releases. Through these metrics, Vista came out with the fewest vulnerabilities compared to various flavors of Linux, Mac OS X and Windows XP during their first 6 months of availability. For those that remember his 90-day evaluation and the criticism he took because of the vulnerabilities in 3rd party offerings in Linux being included, he left those out this time.
It’s quite a bit to digest so I would recommend heading over and reading the report if you are interested in things of this nature. He is a Microsoft employee, so you may take it with a grain of salt if you wish, but he does leave the reports open to scrutiny of the actual data gathered and encourages dialogue of possible disputes of his findings at his Exactly how biased am I? post.
Tags: Microsoft Vista Security Vulnerability





[...] For those that have been following his releases, he has also performed these analyses at 90 days and 6 months. I hadn’t started this blog for the 90 day report, but you can find the 6-month take here. [...]