What is the Controversy? When Microsoft announced plans this summer to lock down its operating system kernel in the upcoming Windows Vista release, many security vendorsvehemently protested.. Many security vendors have created businesses by adding additional functionality to the Windows product and have become worriedthat Microsoft’s intent to disallow kernel patches will impair their ability to provide endpoint security for Windows. Regulatory action was threatened; full page ads were run in the Financial Times; and large public relations campaigns were launched, all complaining aboutMicrosoft’s move, which we believe will actually provide greater user security. At issue is the new PatchGuard (defined below) feature being introduced inthe 64-bit version of Vista. 1 Microsoft’s decision to lock the kernel puts the onus on Microsoft to respond quickly as security problems develop in the kernel. Rather than fight Microsofton its decision, which we believe will improve the security of its customers, third-party vendors should welcome the opportunity to work with Microsoft askernel security situations arise and Microsoft customers require security solutions. Today’s current solution – kernel patching – brings more insecurity, instability,and performance issues than the announced solution, both for the operating system and for the security vendors who patch it.