You should know the Windows 8 security features

Microsoft has added new security features to every version of Windows that has been launched and has improved the security of Windows systems over and over again since Microsoft launched and aggressively pushed its own Trustworthy Computing program. The latest release of Windows 8 is an indisputable fact that, although it has received mixed reviews on new UI and visual effects, its security has been fully upgraded as always. Let's take a look at the new security features added to the Windows 8 system.

Windows 8 Basic Edition security features

The security features described in this section are included in each version of the Windows 8 system. Whether it's a Windows 8 system for home users or an enterprise-oriented Windows 8 system, you can use the following security features. ：

Support Uefi Secure Boot

The Secure Boot security boot feature is a new and important security feature in the WINDOWS8 system, but there are also questions about this feature because there are potential problems with this feature in some cases. UEFI (Unified Extensible Firmware Interface-current version 2.3.1) The main purpose of the development is to serve as the firmware interface for the next generation of computer products, instead of the widely used BIOS interface of the current PC. With the secure boot feature enabled, Windows 8 can effectively withstand low-level malware attacks, such as rootkits attacks. In an operating system with Secure boot, the system submits the digital signature of all boot components to the system's Anti-malware driver section for auditing and discovers suspicious boot components. If the signature of a startup component is abnormal (tampered with), Windows Recovery environment starts and tries to repair the operating system. The rootkit attack technique is usually a key startup file for tampering with the system, which is activated prior to various anti-virus software during system startup. Secure boot will detect any form of tampering and prevent rootkit from being loaded. This function of the WINDOWS8 is necessary for the enterprise, and the enterprise should prevent the employee from disabling the function without authorization.

SmartScreen Filter

SmartScreen Smart screen technology was first seen in IE browsers and is now officially added to the next generation of Windows operating systems. According to NSS Labs, this feature is the most effective way to detect and block the social engine malware in the various browser security features on the market today. The SmartScreen feature has a URL based reputation system and a file-based/application reputation system. The URL reputation system prevents users from being attacked by phishing sites and social engines, and file reputation systems can monitor files downloaded through the browser to ensure that the files are safe and secure. If a downloaded file is identified as a suspicious file or a malicious file, the system blocks the download activity of the file and feeds the user with the following information:

Figure A

If the downloaded file does not have a record in the file reputation system, or the system is not recognized, the following warning message is displayed:

Figure B

For unknown files, most users will still bypass the warning message and take the initiative to open the file, but because of the management control, users can not turn off this warning information without authorization.

Integrated anti-Malware program Windows Defender

Windows 8 now has a complete antivirus and anti-malware solution because of the anti-virus capabilities of the new Microsoft Security Essentials technology in Windows Defender. The new version of Windows Defender improves performance while also reducing the memory/cpu occupancy rate. While many companies still use Third-party anti-virus software purchased by the enterprise themselves, companies should also consult third-party anti-virus vendors, especially if their products support the WINDOWS8 system, because the secure boot feature will enable the enterprise's security environment to respond more quickly, Reduce potential security blind spots.