Microsoft | Sofwar | 6 How Windows 8 More Secure Than Windows 7, Whatever you think it is, Windows 8 is not just a new interface slapped on top of Windows 7. Windows 8 has seen a lot of security fixes, including an integrated antivirus, reputation systems and the application of a protective boot time rootkit.
There are also quite a few low security improvements under the hood. Microsoft does not set out all of them, but Windows 8 to manage memory in a more secure manner and includes features that make it more difficult to exploit security vulnerabilities.
integrated antivirus
Windows 8 finally includes an integrated antivirus program. it was called Windows Defender, but the interface will be immediately familiar to anyone who has ever used Microsoft Security Essentials-This is Microsoft Security Essentials with the new name. You can easily install another antivirus that you want and Windows Defender will automatically be disabled if another antivirus running, but an integrated antivirus product is capable of. Best of all, it ensures that all Windows users will eventually have antivirus protection out-of-the-box.
Initial launch of the Anti-Malware
In Windows 8, an antivirus product can start earlier in the boot-up process to scan the system for malware driver. This helps protect against rootkits that began before the antivirus program and hide from it. Windows Defender starts early in the boot process out-of-the-box, and a third-party antivirus vendors can also add early-launch feature Anti-Malware (Elam) for their products.
SmartScreen Filter
Previously used only in Internet Explorer, SmartScreen filters are now implemented at the operating system level. This will be used to scan the EXE file that you downloaded from the Internet Explorer, Mozilla Firefox, Google Chrome, and other programs. When you download and double-click the EXE file, Windows will scan the file and sends his signature to a Microsoft server. If the known-good applications, such as iTunes installer, Photoshop or other popular programs, Windows will allow it to run. If the known-bad, maybe if it contains malware, Windows will prevent it from running. If new and do not know what it's Windows, Windows will warn you and allow you to bypass the warning.
This feature will help less experienced users from downloading and running malicious programs from the Internet. Even new pieces of malware will be detected by the SmartScreen filter as new unknown programs that should be approached with caution.
secure boot
On computers that use the new Windows 8 UEFI firmware instead of the old style BIOS, Boot secure guarantees that only special signed and approved software can be run on boot. At this time computers, malicious software can install malicious boot loader that much before the Windows boot loader, boot-level rootkit start (or "bootkit") before Windows even launched. Rootkits can then hide away from the window and antivirus software, pulling the strings in the background.
On the Intel x86 PC, you will be able to add your own security key to UEFI firmware, so you can even boot your system secure Linux boot loader only incoming. Read more about the Safe Boot here.
Memory management improvements
Microsoft has made a lot of improvements under-the-hood with Windows 8 to manage memory. When a security hole is found, these improvements can create security holes more difficult or even impossible to exploit. Several types of exploits that functions in previous versions of Windows will not work at all on Windows 8.
Microsoft does not set out all of these improvements, but they have been mentioned a few:
ASLR (address space layout randomization) has been extended over part of Windows, moving randomly around the data and code in memory to make it more difficult to exploit.
Mitigations that once applied to Windows applications now also applied to the Windows kernel.
Piles of Windows, where Windows applications received them from memory, including additional checks for defending against exploitation techniques.
Internet Explorer 10 includes improvements that make 75% of the security vulnerabilities reported over the last two years which is more difficult to exploit.New applications Sandboxed
New apps for Windows 8 Modern interface (formerly known as Metro) sandboxed and limited in what they can do on your computer.
On the Windows desktop, applications have full access to your system. If you download and run Windows games, it can install the driver on your system, reading files from anywhere on your hard drive, and install malware on your computer. Even if the program runs with the limited mandate thanks to UAC, they are usually installed with Administrator privileges and can do whatever they want during the installation.
Windows 8 apps other functions such as mobile applications and web pages on other popular mobile platforms. When you install apps from Windows store, applications have limited access to your system. This can not be run in the background and monitors all your keystrokes, log your credit card numbers and passwords like traditional Windows applications on the desktop to online banking. it does not have access to any file on your system.
There are also applications for the new Windows 8 Modern interface is only available through the Windows store, which is more controversial. However, users can not install applications from the harmful Modern outside the store. They will have to go through the Windows store, where Microsoft has the ability to pull them if they are found to be dangerous.
Windows 8 is definitely more secure than Windows 7. Integrated antivirus and application reputation system, along with the ecosystem tamed app that replaces the wild-west of the previous versions of Windows, it will probably make the most difference for inexperienced users who may not run antivirus or know where it is safe to install applications on previous versions of Windows. Low-level way Windows manages memory improvement will help everyone, even power users.
0 komentar:
Post a Comment