Windows 8 security features

Since Microsoft launched and actively promoted its own trusted computing project, Microsoft has added new security features to each version of Windows that it has introduced and has raised the security level of Windows systems again and again. Although the newly released Windows 8 has received mixed evaluations on the new UI and visual effects, it is an indisputable fact that its security performance has been comprehensively improved as always. Let's take a look at the various security features added to the Windows 8 system. Windows 8 Basic Security Features The security features described in this section are included in each version of the Windows 8 system. Whether it's a Windows 8 for home users or a Windows 8 for enterprise, the following security features are available to everyone. : Support for UEFI Secure Boot Secure Boot Secure Boot is a very important security feature added to Windows 8 systems, but some people have questioned this feature because there are potential problems with this feature in some cases. The main purpose of UEFI (Unified Extensible Firmware Interface - Current Version 2.3.1) was developed as a firmware interface for next-generation computer products, replacing the BIOS interface widely used on traditional PCs. With Secure Boot enabled, Windows 8 can effectively defend against underlying malware attacks such as rootkits. In an operating system with Secure Boot, the system will submit the digital signature of all boot components to the anti-malware driver portion of the system for review to discover suspicious boot components. If the signature of a startup component is abnormal (tampered), the Windows Recovery Environment starts and attempts to repair the operating system. The rootkit attack method is usually to tamper with the system's key startup files, so that it is activated before the system startup process before various anti-virus software. Secure Boot will find any form of tampering and prevent rootkits from being loaded. This feature of Windows 8 is a must for businesses, and companies should prevent employees from disabling this feature. SmartScreen Filter SmartScreen smart screen technology first appeared in Internet Explorer and is now officially added to the next generation of Windows operating systems. According to NSS Labs, this feature is the best for detecting and blocking social engine malware in various browser security features on the market. The SmartScreen feature features a URL-based reputation system and a file/application reputation system. The URL reputation system protects users from phishing sites and social engine attacks, while the file reputation system can monitor files downloaded through the browser to ensure files are safe and reliable. If a downloaded file is identified as a suspicious file or a malicious file, the system will block the download activity of the file and feed back the following information to the user:

Figure A

If the downloaded file is not recorded in the file reputation system, or the system does not recognize it, the following warning message will be displayed:

Figure B

For unknown files, most users will bypass the warning message and actively open the file, but due to administrative control, the user cannot close this warning message. Integrated Anti-Malware Program Windows Defender With the addition of anti-virus capabilities to the new technology in Microsoft Security Essentials in Windows Defender, Windows 8 now has a complete anti-virus and anti-malware solution. The new version of Windows Defender improves performance while reducing memory/CPU usage. Although many companies still use third-party anti-virus software purchased by enterprises themselves, enterprises should also consult third-party anti-virus vendors, especially if their products can support Windows 8 systems, because if they can support Secure Boot, they will let enterprises The safe environment responds faster and reduces potential security blind spots.