What you should know about Windows 8 security features

Since Microsoft launched and actively promoted its own trusted computing project, Microsoft has added new security features to each version of Windows that it has introduced and has upgraded Windows again and again. The level of security of the system. Although the newly released Windows 8 has received mixed evaluations on the new UI and visual effects, it is an indisputable fact that its security performance has been comprehensively improved as always. Let's take a look at the various security features added to the Windows 8 system.

Windows 8 Basic Security Features

The security features described in this section are included in various versions of the Windows 8 system. Whether it's a Windows 8 for home users or a Windows 8 for enterprise, the following security features are available to everyone. :

Support for UEFI Secure Boot

Secure Boot Secure Boot is a very important security feature added to Windows 8 system, but some people have questioned this feature because in some cases There are potential problems with this feature. The main purpose of UEFI (Unified Extensible Firmware Interface - Current Version 2.3.1) was developed as a firmware interface for next-generation computer products, replacing the BIOS interface widely used on traditional PCs. With Secure Boot enabled, Windows 8 can effectively defend against underlying malware attacks such as rootkits. In an operating system with Secure Boot, the system will submit the digital signature of all boot components to the anti-malware driver portion of the system for review to discover suspicious boot components. If the signature of a startup component is abnormal (tampered), the Windows Recovery Environment starts and attempts to repair the operating system. The rootkit attack method is usually to tamper with the system's key startup files, so that it is activated before the system startup process before various anti-virus software. Secure Boot will find any form of tampering and prevent rootkits from being loaded. This feature of Windows 8 is a must for businesses, and companies should prevent employees from disabling this feature.

SmartScreen Filters

SmartScreen Smart Screen Technology first appeared in Internet Explorer and is now officially added to the next generation of Windows operating systems. According to NSS Labs, this feature is the best for detecting and blocking social engine malware in various browser security features on the market. The SmartScreen feature features a URL-based reputation system and a file/application reputation system. The URL reputation system protects users from phishing sites and social engine attacks, while the file reputation system can monitor files downloaded through the browser to ensure files are safe and reliable. If a downloaded file is identified as a suspicious file or a malicious file, the system will block the download activity of the file and feed back the following information to the user:
Figure A

If the downloaded file is in file reputation There is no record in the system, or the system is unrecognized, the following warning message will be displayed:
Figure B

For unknown files, most users will bypass the warning message and actively open the file, but because With administrative controls, users cannot turn off this warning message.

Integrated Anti-Malware Program Windows Defender

With the addition of Microsoft Security Essentials technology in Windows Defender, with anti-virus capabilities, Windows 8 now has a full anti-virus and anti-virus Malware solution. The new version of Windows Defender improves performance while reducing memory/CPU usage. Although many companies still use third-party anti-virus software purchased by enterprises themselves, enterprises should also consult third-party anti-virus vendors, especially if their products can support Windows 8 systems, because if they can support Secure Boot, they will let enterprises The safe environment responds faster and reduces potential security blind spots.