Since Microsoft launched and actively promoted its own trusted computing projects, Microsoft has added new security features to each version of Windows that it has introduced and has improved the security of Windows systems again and again. Level. Although the newly released Windows 8 has received mixed evaluations on the new UI and visual effects, it is an indisputable fact that its security performance has been comprehensively improved as always. Let's take a look at the various security features added to the Windows 8 system.
Windows 8 Basic Security Features
The security features described in this section are included in each version of the Windows 8 system. Whether it's a Windows 8 for home users or a Windows 8 for enterprise, the following security features are available to everyone. :
Support for UEFI Secure Boot
Secure Boot The Secure Boot feature is a very important security feature added to the Windows 8 system, but some people have questioned this feature because in some cases this feature has potential problem. The main purpose of UEFI (Unified Extensible Firmware Interface - Current Version 2.3.1) was developed as a firmware interface for next-generation computer products, replacing the BIOS interface widely used on traditional PCs. With Secure Boot enabled, Windows 8 can effectively defend against underlying malware attacks such as rootkits. In an operating system with Secure Boot, the system will submit the digital signature of all boot components to the anti-malware driver portion of the system for review to discover suspicious boot components. If the signature of a startup component is abnormal (tampered), the Windows Recovery Environment starts and attempts to repair the operating system. The rootkit attack method is usually to tamper with the system's key startup files, so that it is activated before the system startup process before various anti-virus software. Secure Boot will find any form of tampering and prevent rootkits from being loaded. This feature of Windows 8 is a must for businesses, and companies should prevent employees from disabling this feature.
SmartScreen Filters
SmartScreen Smart Screen Technology first appeared in Internet Explorer and is now officially added to the next generation of Windows operating systems. According to NSS Labs, this feature is the best for detecting and blocking social engine malware in various browser security features on the market. The SmartScreen feature features a URL-based reputation system and a file/application reputation system. The URL reputation system protects users from phishing sites and social engine attacks, while the file reputation system can monitor files downloaded through the browser to ensure files are safe and reliable. If a downloaded file is identified as a suspicious file or a malicious file, the system will block the download activity of the file and feed back the following information to the user:
Figure A
If the downloaded file If there is no record in the file reputation system, or the system is unrecognized, the following warning message will be displayed:
Figure B
For unknown files, most users will still bypass the warning message and take the initiative. To open the file, but due to administrative control, the user can not close this warning message.
Integrated Anti-Malware Programs Windows Defender
With the addition of the technology in Microsoft Security Essentials to Windows Defender, anti-virus capabilities, Windows 8 now has a complete anti-virus and anti-malware solution. The new version of Windows Defender improves performance while reducing memory/CPU usage. Although many companies still use third-party anti-virus software purchased by enterprises themselves, enterprises should also consult third-party anti-virus vendors, especially if their products can support Windows 8 systems, because if they can support Secure Boot, they will let enterprises The safe environment responds faster and reduces potential security blind spots.