[Windows 11 security improves and joins Zero Trust – Think Big

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Account Takeover. Indeed, it will be made open source so that it can be used by other operating systems. While this work is represented at the top of the deployment stack illustrated earlier in this article, you can begin this work anytime. Bookmark the Security blog to keep up with our expert coverage on security matters. Attestation helps verify the identity and status of essential components and that the device, firmware, and boot process haven\’t been altered. An access credential is basically a username and password associated with a person and the access permissions granted to that person for an application, service or system. This way, Windows as an operating system does not treat the password as just another string but knows it at all levels and monitors it throughout its use within the operating system.
 
 

Windows 11 Security Approach: Zero-Trust Juggernaut Launched.Zero Trust – Microsoft Security Blog

 

October 5 is the day of the long-expected Windows 11 official release. It provides a lot! Here you can read about nature, reasons, and principles for such drastic changes. A lot has been said already about Windows 11 for many unbearable requirements. How To Fix Guide previously posted an article on that. The new standard is not about performance as much as it is about security and data protection. The notorious Trusted Platform Module 2. That means it does not let decrypted data leave the physically protected environment, which is the cryptoprocessor itself.

TPM serves to generate keys, store them, and authenticate devices. Red flags raised back in can explain Windows 11 security level.

TPM 2. So much for a tiny chip! A user must turn on these features to install Windows hardware-based isolation, secure boot, hypervisor-protected code integrity. Hardware-based isolation is the abovementioned deployment of a secure cryptoprocessor. Secure boot is a UEFI feature.

But it also becomes a requirement for Windows 11 security. It keeps the critical system software protected from any unauthorized access by digital signature check. Secure boot eliminates threats that an operating system or drivers attempting to load can introduce.

As before, Microsoft stakes a lot on virtualization-based security as a reliable safety measure against some side-channel hardware vulnerabilities.

Hypervisor-protected code integrity also known as Memory Integrity is a measure working out Meltdown-like flaws that proved to be unexploitable if the targeted system runs on a virtual machine. You will recall that Windows 10 failed to combine security with convenience in this matter. The Memory Integrity feature had its shortcomings, and hopefully, Microsoft has updated it well since then.

The Windows 11 anti-malware software is still Windows Defender. Features like Windows Hello non-password biometrics-based authentication feature and BitLocker drive encryption tool go alongside it.

However, it is unclear whence comes that percentage. Despite the audacious promotion of high-end hardware, what seems to be more exciting in all this Windows 11 security epic, is the philosophy behind it. Microsoft acts just as planned, fulfilling its to-do list 2.

The point is that the proverbial TPM 2. The concept was theorized back in 3 by John Kindervag as an alternative to the so-called castle-and-moat policy. The latter means that those, whom guards let within the castle walls, are beyond any suspicion.

And that, according to Kindervag, has to be changed. All-round biometric-based authentication is probably a matter of time. Staying offline is impossible nowadays and avoiding malware gets harder and harder.

Therefore, critical data on servers and computers should become inherently isolated, not by arbitrary hedging from what users or network administrators believe to be a threat. Therefore, new systems should secure all user-machine interactions. Microsoft tries to step away from passwords and switch to biometrics-based authentication. According to the zero-trust concept, no device trusts any other machine or human, demanding authentication on every possible checkpoint, granting access to the least amount of data required to perform the task.

Switching to zero-trust by updates and upgrades is challenging. It pays better to do it in design. And that is to what Microsoft aims. Zero-trust is a mindset. We see how the pandemic forces everyone to wear masks and disinfect their hands. The swarming ocean of malware and malevolent hackers pushes everyone towards the zero-trust mentality in the same manner. With all these points considered, the policy behind stringent tech requirements becomes clear.

It aims to nest the new OS only in the machines that can fully support the latest security features. The requirements are themselves a piece of counter-hacker human engineering. What could be added, besides the hope expressed that the effect of these novelties will spread even beyond? Subscribe to our Telegram channel to be the first to know about news and our exclusive materials on information security.

I was a technical writer from early in my career, and consider IT Security one of my foundational skills. Save my name, email, and website in this browser for the next time I comment. This site uses Akismet to reduce spam. Learn how your comment data is processed. Just like the pandemic has forced everyone to wear masks and disinfect hands, the swarming ocean of malware pushes everyone towards the zero trust mentality. Written by Wilbur Woodham. It is better to prevent, than repair and repent!

Gridinsoft Anti-Malware is exactly the tool that is always useful to have in your armory: fast, efficient, up-to-date. It is appropriate to use it as an emergency help at the slightest suspicion of infection. Gridinsoft Anti-Malware 6-day trial available. User Review 0 0 votes. Comments Rating 0 0 reviews. Let\’s see what data protection news it brings around. Security has become a cornerstone of Microsoft\’s newest creation.

Moreover, it dictates Windows 11 hardware requirements that are unsatisfied by millions of pretty much modern machines around the world.

Wilbur Woodham. Facebook Twitter LinkedIn Reddit. Network Security in a Nutshell. Windows 11 Security Book. You may also like. Wilbur Woodham I was a technical writer from early in my career, and consider IT Security one of my foundational skills.

View all posts. Leave a Reply Cancel reply.

 

[Windows 11 zero trust

 
We\’ve made significant strides in that journey to create chip-to-cloud Zero Trust out of the box. In , we announced secured-core PCs. Windows 11 Includes Features That Enforce Zero Trust · 1. Passwordless Authentication. Released with Windows 10, Microsoft face recognition.