Suggestions
Raza Syed
Vice President
Raza Syed, Vice President and Distinguished Engineer at Microsoft
Raza Syed is a seasoned executive at Microsoft, currently serving as the Vice President and Distinguished Engineer for the Distribution and Security Services in the Cloud and AI division.134 He is responsible for engineering Microsoft's security platform in the cloud, building a high-scale, distributed, and secure micro-services-based hybrid cloud platform.1
Career Highlights
- Previously led the organization responsible for the Office 365 suite, transforming it from a packaged software into an industry-leading cloud SaaS offering1
- Served as the General Manager in the Xbox division, leading the roadmap, P&L, and operations for TV (Mediaroom, Xbox, TV Cloud Services) and DRM (Windows Media DRM, PlayReady) products1
- Engineering GM for the Windows mobile engineering team, responsible for the successful commercialization and engineering of key video streaming OS components1
Education
Recognition
- Awarded the title of "Distinguished Engineer" by Microsoft in 2000, recognizing his excellence and contributions as a technical leader2
In his spare time, Raza is an entrepreneur and advisor to multiple technology startups, focusing on product strategy, architecture, and go-to-market areas.1
Highlights
NIST has reached a major milestone by releasing the first three Post-Quantum Cryptographic (PQC) algorithms. The emergence of quantum computers presents significant challenges to cryptography, as popular algorithms are susceptible to quantum attacks. For instance, Shor's algorithm, a quantum algorithm, can efficiently factor large integers and solve discrete logarithm problems, effectively compromising the security of RSA, ECC, and Diffie-Hellman key exchange. Although symmetric algorithms like AES are generally considered more resilient to quantum attacks, key sizes may need to be increased. While quantum computers may still be a few years away, the quantum readiness process must begin now, as it often requires architectural changes in most implementations in addition to the adoption of the new algorithms. Making the architecture crypto agile is a prerequisite for PQC adoption, as the new algorithms will take time to mature and may need to be updated with agility.
While any company is at risk of having their own CrowdStrike moment, there are two key lessons that running a massive-scale Windows Update service has taught us, which are highly applicable here:
-
Implementing Staged Rollout Policies: Using a series of gates to manage product changes, such as new builds and configuration updates, to meet quality standards before deploying to the next customer group. This approach includes a gradual rollout, starting with a controlled environment or a limited set of customers, then progressively expanding to wider audiences and additional validation stages. For signature updates for security companies, it is even more important because the need to be agile is quite unmatched due to the constant threat from adversaries. Therefore, building an agile staged rollout process is essential.
-
Kernel-mode drivers and validation: When implementing kernel-mode drivers, it is crucial to have sophisticated client-side validation. This can be challenging because issues may not surface immediately and could arise only under specific scenarios. However, implementing careful client-side validation and a robust rollback strategy is critical to managing these drivers effectively.
Here are more details worth considering:
https://lnkd.in/ggycDRje
