-
Microsoft’s new Security Update Validation Program
Are we finally getting broad-based testing of security patches (“cumulative updates”) before the patches are released?
That’s the hope. Dawn Thomas at Microsoft just announced something called the Security Update Validation Program.
The Security Update Validation Program (SUVP) is a quality assurance testing program for Microsoft security updates, which are released on the second Tuesday of each month. The SUVP provides early access to Microsoft security updates—up to three weeks in advance of the official release—for the purpose of validation and interoperability testing. The program encompasses any Microsoft products for which we fix a vulnerability (e.g. Windows, Office, Exchange, or SQL Server) and is limited to trusted customers under NDA who have been nominated by a Microsoft representative.
Sure sounds good on paper. Actually, it sounds like an old-fashioned beta testing team, drawn from corporate volunteers. Guess that’s cheaper than hiring testers.
Wonder how it’ll work out in the cold world….
UPDATE: Susan Bradley on Twitter
It is an old program that looks to me to be more opened up again. It was one of the programs that I said should be beefed up again.
ANOTHER UPDATE: The SUVP was launched in January 2005.