Since focusing on Trusted Computing Projects, Microsoft has begun to stick to introducing new security features in every new version of Windows, this has significantly improved the security situation of the system. Now, Windows 8 is no exception in this regard. Although the public focuses on the new user interface and the effect of extremely severe polarization, Security Updates become less conspicuous. In this article, we will take a look at what security features are added in each version, what are the differences between them, and what is the actual effect.
Note that because Windows 8 is still in the development stage, the features described in this article may have been adjusted by the time it was officially released.
Basic security functions provided by Windows 8
These functions will appear in all versions of Windows. No matter whether it is a Windows 8 for family users or a professional or Enterprise Edition for commercial users, there will be no exception:
The UEFI secure startup function will be supported
Although this feature may cause potential problems and defects in some situations, it is still a very important new security feature provided by the current version of Windows. As we all know, the unified and extensible firmware interface UEFI-the latest version is 2.3.1) is designed to replace the traditional basic input/output system BIOS as the next-generation firmware interface of a PC ). Now, if the system chooses to use the secure boot function, Windows 8 can greatly improve the effective defense capability of rootkit and other malware. With the support of the secure startup function, the operating system can verify the digital signatures of all startup components. The anti-malware driver can monitor all tampering operations. If you find that the component signature is incorrect and has been tampered with), Windows will enable the recovery mode to try to process the operating system accordingly. For rootkit malware, the common practice is to tamper with key operating system files and maintain the active mode during the boot process before most anti-malware tools start. The latest secure startup function can detect all types of tampering operations and prevent rootkit from being loaded in. For company users, the best solution is to enable this function directly when Windows 8 is deployed, and prohibit employees from disabling the function.