Windows 8.1 Security Enhancements Overview

Windows 8.1 Preview video has been released, booting to desktop features confirmed by screenshots, more and more detail features have been dug up, and the public's understanding of Windows 8.1 is getting deeper. But a lot of people are paying attention to the new features and improvements of Win8.1, ignoring something equally important, that is, the security improvements of Windows 8.1.

According to some known information, Windows 8.1 will take a more proactive approach to malware protection by adopting new Web site security certificate authentication methods and even adding encryption and biosafety technologies to each PC.

Windows 8.1 Built-in anti-malicious tools Windows Defender will be more "concerned" with browser security, such as Plug-ins and ActiveX controls these add-ins, before they run, defender will first scan them securely.

Prevent theft of security certificates

Security certificate is a large number of Web sites (especially those involved in the account password login site) Important credentials, when users visit the site through the browser, the certificate will tell the browser when the site is real and reliable. So the hacker will look at the security certificate, once cracked and steal the regular website security certificate, as long as a fake web site and then join the theft of the security certificate is very easy to cheat the browser, and users will easily in this case the initiative of their own account password to the Outlaws.

The security certificate has been targeted.

In Windows 8.1, Microsoft will keep track of the security certificates of millions of Web sites, and immediately contact the certification authority to take action in the shortest possible time if a website security certificate is found to be stolen or appears on a site that should not appear.

Encryption and BitLocker

Windows 8.1 continues to provide enterprise users with improved BitLocker functionality (a significant increase in speed), but encryption is not exclusive to enterprise users. Encryption not only protects the data, it should also include the system itself, such as preventing system files from being tampered with by others.

Data encryption also has meaning for ordinary users

Data encryption and biometrics can make this data more secure if you plan to use a Windows 8.1 tablet device to save important data.

Windows 8.1 to view PC health

Windows 8.1 will add a cloud service called the provable PC Health (View PC Health), which detects whether the PC is infected by malware or virus by contrasting the PC security boot record stored in the TMP (Trusted Platform Module). This service can remotely analyze the security status and integrity of PC devices.

When a user's PC is infected with malware, the service can attempt to restore the system to a secure state and send a security notification to the user.

View PC Health at any time

And once your PC is confirmed to have no malware or viruses, you can even treat it as a more reliable authentication method than a password. Passwords can be violently cracked or acquired by fishing, and the equipment used for this authentication is much safer. If you add a verification tool to this PC (such as fingerprint login), the safety factor will increase further.

Windows 8.1 fingerprint sensor

Using fingerprints as an authenticator is a good choice, but the existing equipment lacks a proper balance in terms of price and security, and inexpensive sensors are too large to fit on laptops and tablets, and such sensors can be easily cracked. and small size security and ensure that the sensor price is high, if applied to WIN8 equipment will pull up a lot of prices.

Fingerprint identification uses a wide range of

It is reported that Microsoft is working with partners to try to introduce low-cost high-quality fingerprint sensors, Windows 8.1 notebook and tablet to add a security certification.

Windows 8.1 Virtual Smart card

This is an enhanced feature for enterprise users. Smart cards and their personal identification numbers (PINS) are an increasingly common, reliable and economical form of dual-factor authentication. Because of the control, the user must have a smart card and know a PIN in order to access network resources. For Windows 8.1来, it provides a way to gain network access to a device that cannot be joined to a domain but has a TPM, such as a WINRT tablet. This is the virtual smart card, as long as the employee's computer has a built-in TPM without using a separate physical smart card and card reader.

Windows8.1 Selective deletion

Windows 8.1 also includes a "selective deletion" feature that is designed to remove corporate files stored on personal computers without deleting personal data. Working files related to the enterprise will be protected by encryption, and the enterprise administrator can delete this part of the file through a remote command.

As more and more people work with their own equipment (BYOD), virtual smart cards make those personal devices equally qualified to join the corporate network (no additional equipment is required), while companies have access to corporate data stored on their personal computers, and once employees leave, The enterprise data can be deleted in time by remote operation.