Cleaning the hard disk.

Now we offer you an extended list of security features, depending on the editorial office of the new operating system.

Since Microsoft joined the Protected Program information systems (TrustWorthy Computing Program), each new version of Windows presents new security features and in general has a significantly higher level of security. Windows 8, turn, is not an exception, but the safety of the OS, but a new user interface is exposed to special attention of critics. In this article, we will get acquainted with some different security options depending on the version of the OS.

Bright start. Illustration from Microsoft.com

Basic security features Windows 8

Here are features available on all versions of Windows 8: oriented to home use, Professional and Corporate (Enterprise Edition).

Support for secure loading OS using UEFI technology

There are disagreements regarding the use of this function due to the potential problems that it can cause in some cases. However, the secure boot of the OS (Secure Boot) is very important. new characteristic Security included in this version of Windows. UNIFIED EXTENSIBLE FIRMWARE INTERFACE, current version 2.3.1) is designed to replace the standard BIOS interface (Basic Input Output System) and is the following generation of the interface between OS and firmware, controlling low-level functions of the PC equipment. When the secure download option is enabled, Windows 8 is capable of resisting low-level exposure malicious programs, such as rootkits. IN

On the time of safe loading OS will check all digital signatures of boot components using an anti-virus driver to prevent unauthorized access. If any component does not have a valid correct signature, the service will start Windows Recovery. And tries to make changes to Windows. Ruchkit usually makes changes to the key OS key files and becomes active during windows downloadsBefore the start of the work of antivirus protection. The safe download function will prevent any unwanted access to the system files and, therefore, the auto-loading capabilities of rootkit.

Filter SmartScreen.

SmartScreen Initial Technology was introduced in Internet Explorer. And in Windows 8, it is already part of the OS. NSS Labs tests have shown that the SmartScreen filter is the best technology of modern browsers to detect and protect against socially oriented malware. SmartScreen contains websites rating and file rating on the network. The web page rating system is designed to protect the user from phishing and other types of attacks from social networks. The file rating system tracks the file download and checks the rating rating that matches them. If the initial file was added to the SmartScreen filter as unsafe, or it new file. Or the file, unrecognized by the system, it is blocked and a warning is displayed.

SmartScreen: What do you want to do with unidentified applications

Users can open unrecognized suspicious filesIn this case, the warning is not ignored, because Available administrative management application.

Built-in Anti-Virus / Windows Defender

Windows 8 got a full-fledged antivirus solution, because Windows Defender now includes antivirus functions from Microsoft Security Essentials. . The new version of Windows Defender has a higher performance and less consumption of memory and processor resources. Organizations may indicate the desire to change the anti-virus built-in antivirus with the selected antivirus product of third-party vendor. In this case, they should make sure that the vendor plans of the antivirus are supported by Windows 8. It is compatible antivirus solutions in combination with the Secure Boot function allow you to effectively protect the PC with minimal invisible zones.

Image password is new Technology safe login in account With support for sensory input. The user is invited to choose a picture and make 3 arbitrary gestures on top of it. The system will save the sequence of gestures as a user password and to log in to the system this sequence will need to be repeated. For example, a user can choose the image of two people and draw a smile on one face and touch the eye on another face. The picture-password is an interesting alternative to the traditional password, however, the reliability of such technology has yet to find out.

Graphic password - New way to protect computers with touch screens

Windows Reader.

An interesting new security feature is built into Windows Reader, a new document viewer for Windows 8. This viewer supports documents pDF formatwhich became a very popular object of attacking malware. Use small in size built into OS windows programs Reader whose patches will be installed together with windows updates UPDATE will increase the security by reducing the number of potentially dangerous applications and plug-ins to work with PDF.

ASLR technology

ADDRESS SPACE LAYOUT RANDOMIZATION (ASLR) was first presented in Windows Vista.. This technology serves to change randomly, location in the address space of the process of important structures, namely: the image of the executable file, loaded libraries, etc. ASLR Thus, protects against buffer overflow vulnerabilities. In Windows 8, the accidental redistribution algorithm is changed to counteract the known ASLR bypass methods. Other prevention measures include changes in the OS kernel, as well as new intrastable checks and random redistribution by similar to the ASLR algorithm. Internet Explorer. 10 received many advantages from these changes: the advanced security mode of the browser includes a sandbox with a forced ASLR mode, which allows us to randomly redistribute all browser modules in memory, regardless of their technology support.

Windows 8 security features professional

The following security features are available in Windows 8 publications: Professional.

BitLocker and BitLocker Portable Version

BitLocker - a product for full disk encryption, first submitted to Windows Vista, and subsequently an extended portable version for portable data storage drives in Windows 7. Little has changed from the previous BitLocker versions, but now the option has appeared. reserve copy Encryption key on cloud servers.

Encryption file system

EFS (Enscripting File System) is the original Microsoft solution to encrypt individual disks, folders or files. Initially, the technology was presented almost twenty years ago in the Windows NT family, but now it is displaced by BitLocker, BitLocker to Go and free encryption utilities.

As usual, these two functions are distinguished hOME VERSION Windows from professional. Opportunity to become a security participant Active Directory. It is necessary for organizing a centralized management environment. Once by joining the database, administrators can create and apply group politicians and monitor many aspects of OS security. Windows 8 presents new specialized services:

Windows 8 Enterprise Security Features

Organizations that concluded Software Assurance Assurance Program will have access to Windows 8 Enterprise, which will include the following functions Security:

Applocker

AppLocker - Microsoft Product for Application Management. For the first time, the solution was presented in Windows 7, and it works either with black or with white application lists. Using AppLocker, the administrator can create rules that prohibit or allow specific applications to be installed or run by the user. Windows 8 AppLocker has been further developed in order to manage both traditional programs and new Metro applications.

Connecting DIRECTACCESS.

Microsoft introduced DirectAccess as an alternative to VPN, to securely connect computers to corporate network. Connecting DirectAccess does not require the launch of additional application applications and allows organizations to ensure compliance with the requirements for remote or mobile computers, Effectively applying rules and updates. This feature has not changed much with previous versionFor the first time used in Windows 7.

Portable version of Windows

With the advent of the concept of "Bring Your Own Device", Microsoft announced the exit of portable windows version, fully customizable image of Windows 8 Enterprise, which administrators can move to an external USB drive and upload from any 64-bit PC anywhere, regardless of connection. Because This is customizable image of Windows. 8 ENTERPRISE, portable OS includes windows services UPDATE, corporate antivirus solutions and BitLocker. Among the requirements of a portable Windows, you can highlight the drive with 32 GB of memory and a 64-bit computer. Despite these restrictions, portable system It may be useful in a variety of cases, including for organizations that have increased information for the safety of information, where the inability to restore the data can lead to disastrous consequences.

Found a typo? Highlight and press Ctrl + Enter

I do not know how you feel about Windows 8, and she likes me every time more and more. The previous article I considered the differences between the eight of the seven ,. Innovations touched not only the interface, but also significantly improved safety.

Comprehensive antivirus defense

Windows 8 finally includes an integrated antivirus. It is called Windows Defender, but the interface will be familiar with anyone who ever used Microsoft Security Essentials. In essence, Defender is Microsoft Security Essentials with a new name. You can easily install any other antivirus that you prefer and Windows Defender will be automatically disabled if another antivirus works. This version of Windows Defender has increased performance And consumes smaller computer resources. Combined with Secure Boot is able to actively protect the system from viruses, rootkit.

Early Starting Anti-Malware

In Windows 8, anti-virus products are loaded earlier than drivers and others system files To scan the system for malicious programs. It helps protect against rootkits that are loaded to anti-virus programs and hide from it. Windows Defender is loaded earlier, and third-party antivirusers can also add an anti-malware early start function to your products.

Filter SmartScreen.

SmartScreen technology debuted in Internet Explorer, and is currently carried out at the operating system level. It will be used in any browsers that you install on your system. SmartScreen has a reputation system and URLs and files / applications on the network. The reputation URL system is designed to protect users from phishing and attacks of social engineering. File system Reputation tracks file downloads and checks their respective secure reputation. If the file was previously identified as malicious, it will be blocked. This feature should help less experienced users Download and run programs from the Internet. Even new parts of malware will be detected SmartScreen Filteras unknown new programto which comes with caution

Secure Boot

Secure Boot is a very important new security feature included in this version of Windows. Designed to replace traditional BIOS ( basic system I / O). When Secure Boot is enabled, it can make Windows 8 very much-resistant low-level malware, such as rootkits. With Secure Boot, the operating system will check the digital signatures of all boot components to malicious proceeds for detecting unauthorized access. If the component is not properly signed (it has been changed), means windows restoration It starts and will try to fix operating system. Rukkitt is usually embedded in one way or another to key operating system files and becomes active during the download process before many protection against malicious protection programs are included. Secure Boot will detect any type of intervention and prevent rootkit from download. What threatens secure boot Windows. RT read more detailed information about

New applications have limited access.

Windows 8 applications function like web pages and mobile applications on others popular mobile platforms. When you install the application from Windows Store, the application has limited access to your system. He can't work in background mode and track all keystrokes, credit card number registration and passwords to online banking applications, it does not have access to all files on your computer.

Improving memory management

Microsoft made a lot of improvements in memory management methods, for the enclosure of protection against exploits. Some types of exploits that operate in earlier versions of Windows will not work on all versions of Windows 8. Protection against exploits includes.

ADDRESS SPACE LAYOUT RANDOMIZATION (ASLR)- It becomes completely shifting the location of pains of the parts of the code and data in memory so that the code and data are not on the same address on all computers. Windows 8 has expanded ASLR protection into several parts for Windows and enhanced enhancements such as increased randomization, which will break many well-known ASLR bypass methods.

Other innovations include changes in windows kernel, including new checks of integrity and randomization using a similar approach to ASLR. Internet Explorer 10 will also be more protected: in addition to the protected mode (sandbox), there will be a "FORCEASLR" version of IE10, which will randomly load all modules.

Windows 8 is definitely safer than Windows 7. First of all, the help of novice users, some do not know which programs are considered to be viruses, and even the most suspicious objects are launched (for example * .rar.exe). Low level of improvement in Windows, memory management method will help everyone, even experienced users.

If you are Windows 8.1, then these tips can make you easier when working with OS. The computer will work without any problems, and the system is protected. So, 6 tips when working with Windows 8.1.

Installing the latest updates

Now the operating room has already been released. windows system 10 and Microsoft tries with all his might so that as many users can move on exactly this platform. However, for Windows 8.1, they still produce some time updates. Although support for Windows 8 and Windows 8.1 ends.

If you still use this operating system, then definitely install the most latest updatesthat correct various errors In the system and add new features. You can download them from the center of updates. Some updates increase productivity and correct security problems.

Install Driver Updates

Most often, any components in Windows do not work due to the fact that they are not installed the necessary drivers. To Windows 8.1, this also applies. If you do not know how, or where to install the drivers, where is described how you can quickly install the drivers. If they are already installed, then update them to the latest version. Also, you can go to the manufacturer's website of your laptop or computer and install the necessary drivers for components: video cards, sound card and other.

Update applications

Install applications from the Windows Store? Then be sure to update them. Do it can be just in Windows Store. Press "Application Updates", later "Check availability updates"And then select applications that need to be updated.

This is not the only thing you can do. It is advisable to install latest versions and programs that you download from the Internet or install from the disk.

Installing Antivirus

In Windows 8.1, there is already a built-in antivirus, which is called « Windows Defender» . If he does not suit you, then you can set another, for example, or. Windows defender will be disconnected.

Cleaning the hard disk

If you installed Windows 8.1 from scratch, it is not worried about anything about what, and if not, then the disk most likely copies of previous settings have been preserved. To delete these files, you can use the standard tool. "Cleaning the disk". To use them, open "My computer", then click on the system disk the right mouse button and choose "Properties", now choose "Cleaning the disk", just below, select "Clear system files", choose files, Including temporary installation files and click OK.

Creating a backup

If you do not, then when the system "will fly", you can not return anything. To make a backup need to open "Control Panel", then go to point "System and safety". Next, open "File Story" And you need to click on the point « Backup copy System Image »which is in the lower left corner. Further everything is intuitive. Or you can use third-party software.

Despite contradictory opinions on this technology due to potential problems that it is capable of creating in certain scenarios, Secure Boot is a very important component of security in new version Windows. UEFI (Unified Extensible Firmware Interface, Unified Extensible Firmware Interface, current version - 2.3.1) It is intended to replace the traditional BIOS (Basic Input Output System, the basic I / O system) as the microprogram support interface of the new generation computer. Secure Boot feature can provide exclusively reliable protection Windows 8 from low-level malicious by type of rootkits. When using Secure Boot, the operating system checks the digital signatures of all loaded components up to the anti-virus software driver to identify their malicious change. If the component does not have a valid signature (that is, it has been changed), Windows Recovery Environment (Windows Recovery Environment) is loaded, which tries to return the operating system to normal state. Rucker, as a rule, change key system files and activate while the system is loaded, until the anti-virus protection is turned on. Secure Boot detects any changes to this kind and prevents the loading of rootkit. When Windows 8 is deployed, the company should include this feature and disable it to disable it.

Filter SmartScreen.

BitLocker and BitLocker to Go

Materials