Windows 10: Announcing 2019 MSRC Most Valuable Security Researchers

Brink · Aug 8, 2019

Earlier today we announced MSRC’s 2018-2019 Most Valuable Security Researchers at Black Hat. The following 75 researchers hail from all corners of the world and possess varied experience and skills, yet all of them have contributed to securing the Microsoft’s customers and the broader ecosystem.

For over a decade, one of Microsoft’s partners in vulnerability research and disclosure has been Trend Micro’s Zero Day Initiative. In addition to ZDI’s vulnerability rewards program, Trend Micro is a longstanding member of the Microsoft Active Protections Program (MAPP). This year Trend Micro’s original security research was tracked with the community contributions of the ZDI program, and subsequently only recognized in our individual Most Valuable Researcher program. Moving forward, Trend Micro original research will also be recognized in our MAPP Top Contributing Partners program, better recognizing the substantial impact Trend Micro has in protecting Microsoft customers as well as the broader ecosystem.

If you are interested in how we identified the Most Valuable Security Researchers this year, our Recognizing Security Researchers in 2019 blog provides additional details on our points model.

Looking forward to another great year working with all of you!

Sylvie Liu, Security Program Manager, MSRC Community Programs
Click to expand...

Source: https://msrc-blog.microsoft.com/2019...y-researchers/

Tweet

— Twitter API (@User) View on Twiiter

:)

Brink · Aug 8, 2019

MSRC 2017 list of Top 100 security researchers

Security researchers play an essential role in Microsoft’s security strategy and are key to community-based defense. To show our appreciation for their hard work and partnership, each year at BlackHat North America, the Microsoft Security Response Center highlights contributions of these researchers through the list of “Top 100” security researchers reporting to Microsoft.

This list ranks security researchers reporting directly to Microsoft according to the quantity and quality of all reports for which we’ve issued fixes. While one criteria for the ranking is volume of reports a researcher has made, the severity and impact of the reports is very important to the ranking. Higher-impact issues carry more weight than lower-impact ones. While this list does not include security researchers who report to our partners ZDI and iDefense as we do not always have full information to recognize their efforts, we very much appreciate the partnership with ZDI and iDefense as they ensure that we know about any reports affecting Microsoft products.

Given the number of individuals reporting to Microsoft, anyone ranked among the Top 100 is among some of the top talent in the industry. Regardless of where security researchers are ranked in this list, we appreciate their active and ongoing participation with the Microsoft Security Response Center, and encourage new researchers to report potential vulnerabilities to us at L: secure@microsoft.com. We’re excited to see who’s going to be on the list next year.

MSRC team
Click to expand...

Source: The MSRC 2017 list of “Top 100” security researchers MSRC

Brink · Aug 8, 2019

Inside the MSRC - How we recognize our researchers

This is the first of a series of blog entries to give some insight into the Microsoft Security Response Center (MSRC) business and how we work with security researchers and vulnerability reports.

The Microsoft Security Response Center actively recognizes those security researchers who help us to protect our several billion customers and their endpoints in several ways. We split our acknowledgments into three distinct categories, CVE qualified submissions, online services, and bug bounty. It is possible that a single submission will be acknowledged by one or more of these categories. We update our acknowledgements each month with the latest findings and submissions.

When it comes to recognizing our researchers through Coordinated Vulnerability Disclosure (CVD), if the finding that was submitted was impactful enough to be addressed in our monthly bulletin release (more on that in our next blog) it will be assigned a CVE number that is credited to the researcher. The researcher and their associated CVE are acknowledged monthly here in the MSRC Security Update Guide.

Our Online Services Security Researcher Acknowledgements credit those researchers who are involved with making our online platforms safer by not only submitting their findings, but also working closely with us to fix vulnerabilities discovered during their research. We draw an immense body of knowledge and capability through direct engagement with security researchers who test and evaluate our online services spaces. Together with our Operational Security Assessment work, we are constantly improving our offerings and providing a secure experience to our customers globally.

Finally, the Microsoft Bug Bounty program offers a unique acknowledgment platform to reward security researchers with cash and other prizes for submitting their findings inside of our eligible bounty programs. Security researchers (aka “Bounty Hunters”) can potentially earn anywhere between five hundred dollars and two hundred fifty thousand dollars for each submission to the Microsoft Bug Bounty program. Currently we offer nine different bounty programs where there is an opportunity to earn money for submissions.

The security community is full of great research and insight, we all succeed when we come together on a common platform. We appreciate working with security researchers to better customer security and ensure our products and services continue to evolve with the threat landscape. Public acknowledgements are just one way we want to interact and support security research in the community. A big thank you to all the researchers that have and continue to engage directly with us.

Our next blog entry will look at what sort of reports go into our monthly security update cycle. Stay tuned.

Phillip Misner,
Principal Security Group Manager
Microsoft Security Response Center
Click to expand...

Source: Inside the MSRC – How we recognize our researchers MSRC

Brink · Aug 8, 2019

Call for Papers - Microsoft BlueHat Shanghai 2019

The Microsoft Security Response Center (MSRC) recently announced our first BlueHat security conference in Shanghai which will take place on May 29-30, 2019. After 15 years of BlueHat events in Redmond, Washington and Israel, we are thrilled to expand to a new location. We work with many talented security researchers throughout the Asia Pacific region to protect our shared online ecosystem, and we can’t wait to connect with them in person at BlueHat!

BlueHat Shanghai will provide a fun, accessible venue for security researchers to come together and share innovative cybersecurity research and ideas. If you are a security researcherer or a security engineer, come join us! We are accepting CFP submissions through March 31, 2019. To submit a talk, please review the CFP information and complete the form via https://aka.ms/bhcfp.

Topics of interest include, but are not limited to:

Virtualization & Cloud-Based Research, Exploits, and Defense

New Exploit Techniques

Emerging Threats and Trends

Hardware and Firmware Security

Infrastructure and The Internet of Things (IoT) Security Research, Exploits, and Defense

Machine Learning and Security Analytics

Supply Chain Security

Malware Research

Speakers can choose to present in English or Mandarin. We will provide simultaneous interpretation and content translation during the conference. While BlueHat Shanghai presentations may be made in Mandarin or English, please submit to the CFP in English only.

If you are interested in attending and would like to get an invite, please complete the pre-registration form. You will receive a conference registration link in mid-April if your pre-registration is confirmed.

If you have any questions, please feel free to contact us at L: bluehat@microsoft.com.

Hope to see you in Shanghai soon!

Regards,
Sylvie Liu, Security Program Manager
Microsoft Security Response Center (MSRC)
Click to expand...

Source: Call for Papers | Microsoft BlueHat Shanghai 2019 MSRC

Windows 10: Announcing 2019 MSRC Most Valuable Security Researchers

Announcing 2019 MSRC Most Valuable Security Researchers

Announcing 2019 MSRC Most Valuable Security Researchers

Announcing 2019 MSRC Most Valuable Security Researchers

Announcing 2019 MSRC Most Valuable Security Researchers - Similar Threads - Announcing 2019 MSRC

Filing an MSRC Report

PROBLEM MSRC

MSRC Recognizing Security Researchers in 2020

Microsoft surpasses Apple as most valuable company in the world

Announcing Microsoft Research Open Data

Inside the MSRC - How we recognize our researchers

Inside the MSRC - The Monthly Security Update Releases

MSRC 2017 list of Top 100 security researchers

Microsoft announces Office 2019

Users found this page by searching for:

msrc top 100 2019

msrc top researcher