Moice: The latest office security feature released by Microsoft

In May 21, Microsoft officially released moice, the latest security feature provided by Office 2003 and 2007.

Moice is Microsoft Office Isolated Conversion Environment (moice ). Don't ask me how to pronounce this word and why I chose such a name. One of the sorrows of developers is that they have no influence on the final name of the product. Alas, all power is in the hands of the market department. Well, let's get down to the truth. What is moice? We know that the latest security trend is to focus on attacks against computer systems from operating systems to applications. Program Transfer. Office programs, such as Word or PowerPoint, have been under attack recently. Calculate how many office security patches have been released by Microsoft in a while. Moice is designed for security vulnerabilities in office documents. In Office 2007, a new XML-based document format is proposed. Based on the analysis of past office security vulnerabilities, harmful documents often contain some unconventional formats. An interesting fact is that if you convert these harmful documents containing security vulnerabilities to the latest 2007 XML format, either the Conversion Tool reports a conversion failure, either the conversion tool will crash (crash ). The moice principle is that when you open an old version of the Office document, you can first start a conversion tool that runs in the restricted environment (isolated environment. Then, we use this conversion tool to convert the original office document to a 2007 XML format. If the conversion is successful, it is enabled normally. If the Conversion Tool fails or exits unexpectedly, a warning is given to the user. Through this measure, we hope that even if Microsoft has not found a (0-day exploit) office security vulnerability in the document, it will be prevented by moice. Of course, moice will affect the speed of file opening. However, there is no big difference between regular size files. In short, this is a very good security function. We strongly recommend that you install it. The following two sites contain more information, including how to install them. Http://www.microsoft.com/technet/security/advisory/937696.mspxhttp://support.microsoft.com/kb/935865