NCSC warns expiration date software – Security.nl

Like many foods also software has an expiration date and it is important for both consumers and businesses to keep that in mind. Before that warns the National Cyber ​​Security Center (NCSC) from the government. Many suppliers stop after a certain period of time with the support of programs or a package. The software is then “End-of-Life”.

“Software after End-of-Life no longer tenable and can no longer be considered safe. The NCSC recommends that systems after that announcement soon as possible to update software and phased out to be replaced, “as the government organization in a new fact sheet says. Vulnerabilities in End-of-Life software are discovered will namely not be patched.

To prevent situations like the upgrade process should quickly be deployed as possible if a provider has announced the support of a program will end on a certain date. “The upgrade can potentially cause problems with the operation of other programs. Therefore, start on time with the planning, testing and upgrading.” The NCSC suggests that some systems, such as medical or industrial equipment, not to upgrade. In this case alternative measures may be taken, but that require intensive management.

An example of End-of-Life software is Windows XP and soon Windows Server 2003 / R2, that after 14 July this year will no longer be supported. Can not be replaced in the event the software phased NCSC recommends to reduce the connection with the outside world to a minimum. “Ideally, this means that this computer is not connected to the Internet, is not connected to the network and that no external media such as USB sticks are placed in there.”

If the computer still a office network or must remain connected to the Internet, which should only be used strictly for necessary operations, or may be chosen to place the system in a segmented portion of the network. Information would be unnecessary network services on the computer off and only local accounts should be used. “Log no longer with company and administrator accounts,” the fact sheet (pdf).