Taking Cyber ​​Threats to the Next Level | Antivirus Software

-
Taking Cyber ​​Threats to the Next Level | Antivirus Software


Today we are seeing revolutionary changes in the technology used by cybercriminals. Unfortunately, until recently, cybercriminals have enjoyed a significant technological advantage over corporate and private users. Today's computer cybercriminals are well-trained and well-funded, which is not surprising, since it brings huge profits to the organizers of cyberattacks against targeted companies. As a rule, cybercriminals use methods that were not known when modern platforms and security infrastructure were developed, so many companies and organizations, even those who invest heavily in information security, are at risk and cannot be sure of 100 % security of their data.


In the meantime, the financial damage from attacks and the material incentives for cybercriminals have become very specific and measurable - the media now and then give us indicative figures. Those who seek to steal intellectual property, extortion and sabotage are increasing every day, and their tactics are becoming more sophisticated. Attacks are increasingly reaching their target, and no organization is immune to assassination attempts.


To effectively counter modern threats, a completely new approach is needed - one in which the platform architecture itself is built taking into account the need to protect data comprehensively and comprehensively - at every level. Such a system is Windows 10, whose developers initially took into account the need to counter modern threats.


Platform architecture


Virtualization Based Security hardware isolation is at the heart of our platform security strategy. This technology uses virtualization processor extensions to create a protective barrier between proprietary components and sensitive data from Windows and the rest of the operating system. Windows 10 employs virtualization-based key protections such as the Trusted Platform Module (TPM) cryptoprocessor, Device Guard and Credential Guard.


Credential Guard has proven to be a tremendously useful solution, with our customers saying it's their top security tool and that it alone is worth deploying Windows 10 in the company. Not surprisingly, this component counteracts Pass-the-Hash, one of the most popular methods of attacking corporate IT infrastructure today.


Isolation and data protection at the hardware level is another enhancement to Windows 10, with virtualization technologies (such as Intel VT) at the processor architecture level and TPM capabilities being important components of this system. More recently, TPM 2.0 has been adopted as an international standard, which means more and more devices will support TPM 2.0, opening up the possibility of using complex encryption, multi-factor authentication and other security measures.


With the release of the Windows 10 Anniversary Update, Windows Hello biometric authentication and user biometric data will be brought into a secure environment for even stronger protection against the most sophisticated threats.


Proactive defence


One of our main goals is to create a platform that is protected from any malware and threats. To this end, we have developed proactive protection capable of avoiding any contact with potential sources of danger. SmartScreen technology is a good example of this approach, which is based on a cloud-based system for checking the reputation of applications and sites. If a user tries to access an unsafe site in Microsoft Edge or Internet Explorer, SmartScreen will alert them and stop loading the page. Starting with the Anniversary Update, this technology will use Microsoft Intelligent Security Graph statistics to track even more threats and classify them faster.


Microsoft Edge is now even more secure


The AppContainer sandbox allows you to isolate your browser from the rest of the operating system, other applications, and user data.


The new plugin model blocks the launch of unsafe elements.


ASLR and Control Flow Guard technologies prevent such common exploits as heap spraying and ROP from entering the browser and RAM.


Suspicious and malicious fonts contained on some sites and embedded in documents are now blocked, and the code to parse these fonts is executed in the sandbox.


All these measures have already proven their effectiveness. To date, all discovered vulnerabilities in Microsoft Edge have been closed, and there are no reports of successful attacks - to some extent due to the described innovations.


This should please our users, but we are not going to stop there. The Anniversary Update will add new features to make life even more difficult for cybercriminals. First, Flash will operate separately from the browser, which will block attacks that target vulnerabilities in this multimedia platform and reduce the likelihood of their impact on the browser and the system. Second, we have significantly limited the impact of attacks on Microsoft Edge and Internet Explorer by reducing the level of access to Windows subsystems.


When it comes to countering threats, antivirus software that detects viruses and spyware most often come to mind. To combat this type of threat, Windows 10 includes Windows Defender, a full-featured, enterprise-grade solution. It will be significantly improved in the Windows 10 Anniversary Update to address the latest threats. And it should be said that our many years of efforts to improve this service are bearing fruit: over the past year, Windows Defender's performance in comparison tests of antivirus programs have improved significantly: up to 99.8% of detected viruses in testing in April 2016, which is 11% more than last year's results ...


Identity protection


Windows Hello is a great multi-factor authentication tool, and in the Anniversary Update we will be adding two important enhancements to make it easier to use and wider to use. We've made Windows Hello a fully integrated solution. It will now support all biometric authentication methods as well as manage the credentials required to unlock the device.


Windows Hello now requires a user's data to be bound to all devices with which they interact. However, IT security regulations in some organizations prevent this from happening. In the updated version of the service, Windows Hello companion devices will be able to act as one of the authentication factors, which will allow using biometric authentication and credentials in any combination on different devices. For example, a user can set up Windows Hello on a PC without a biometric sensor: it will be unlocked using the biometric equipment of another device, for example, a phone or an employee badge.


Thus, the Windows platform allows you to create companion devices for any Windows Hello use case, with a wide variety of security requirements and solution costs.


Intrusion Protection


A new Windows Defender service, Advanced Threat Protection, will be available in the Anniversary Update. It will assist organizations in detecting and analyzing cyberattacks on their IT infrastructure. This service, based on the information security tools already available in Windows 10, provides an additional layer of protection when cybercriminals do manage to invade the network. By combining client technologies in Windows 10 with cloud technologies, it can detect threats that have bypassed other protection tools. Also, thanks to Advanced Threat Protection, the company will receive information to investigate the vulnerability and recommendations for eliminating the consequences of the attack.


Protection of Information


Protecting corporate information is the primary task of information security for business, and in Windows 10 we paid special attention to it. Our BitLocker data encryption solution protects sensitive information even if media devices are lost, stolen, or improperly disposed of. With the release of Windows 10, BitLocker brings the tools our customers have requested, such as enterprise management and single sign-on capabilities. As you plan your move to Windows 10, take another look at the new BitLocker features for businesses.


Data loss prevention is another aspect that we are constantly working on. We are pleased to announce that the Anniversary Update will bring a new information protection tool: Windows Information Protection (WIP), formerly known as Enterprise data protection (EDP). WIP is an easy-to-deploy and easy-to-use solution that separates personal and corporate data prevents accidental leaks and unauthorized access and allows organizations to remotely wipe corporate data on devices when needed. Unlike other solutions, WIP is fully integrated with the platform and practically does not affect the user's experience. Other Microsoft products such as Office Professional Plus or our new Azure Information Protection serviceleverage the power of WIP to provide you with even more comprehensive protection.


Standards and Certifications


Over the years, Microsoft has proven the safety of its products through third-party and government certifications. In the United States, the independent Common Criteria (CC) and Federal Information Processing Standards (FIPS) certifications are very important to us. After that, we receive safety certificates in other countries. We have certified all previous releases of Windows 10. As for the massive Anniversary Update, it will receive separate security certifications, and certification work will begin as soon as it is officially released.


For Today, Perhaps, Everything.


The Windows 10 Anniversary Update brings you a host of new features to complement and improve your existing protections. We owe many of these innovations to you and other Windows Insiders. And, of course, when planning the development of the system internally, we do everything possible to increase its security. This requires a thoughtful, fundamental approach that starts with the architecture and takes into account all possible scenarios for the operation of the security system and the use of data, as well as all the fixed models and tools of targeted attacks. This is the only way we can improve the security of our customers and help them innovate faster to protect against the latest threats in the future.


Hurry to upgrade to Windows 10 for the most advanced security capabilities.

Comments

Post a Comment

Popular posts from this blog

Why Not to Restart Your Computer if It Is Infected With the Ransomware | Total Security

-
Image
The Internet has made our lives easy, especially in the field of online buying and selling, but with simplicity come greater challenges. One of the main issues that come with shopping online is its security concerns. So far this year, more than a thousand shoppers in Australia alone have reported cases of online shopping fraud, and 56.6 percent of those cases come with massive financial losses. As the Internet has become our daily tool for trading, investing, and consuming content, we cannot stop buying and selling online, although we are at risk of phishing from scammers who get richer by defrauding users, so we can do a lot to prevent our money from being stolen and defrauded. Buying from various online stores. This article provides practical advice for smart shopping online. These tips are classified into two parts: 1- Prevention Tips - How to protect yourself from fraud and deception while shopping on the Internet? 2- Tips - What do you do after being deceived? 1- How to protect yo...
Read more

What Is a Ransomware Virus and How Do You Protect Your Computer From It | Total Security

-
Image
The attacker then demands a ransom from the victim to regain access to the data upon payment in a virtual currency such as Bitcoin. You are presented with instructions on how to pay a fee to obtain the decryption key. Costs can range from a few hundred dollars to thousands, and you pay cybercriminals in Bitcoin. What are the types of ransomware? Depending on the result of the attack, ransomware can be classified into the following categories: Locker Ransomware: ransomware that shuts down your system and demands a ransom is classified to give you access to locker ransomware. Crypto-Ransomware: This type of ransomware encrypts your files and forces you to pay a specified amount of money to decrypt your files. The victim is required to pay for the anti-virus program that removes this virus. Ransomware Android Mobile Device: This type of ransomware either permanently close your mobile phone or steals its sensitive data, and requires a ransom to unlock it or to return the data. IoT Ransomwa...
Read more

What is a zero-day threat? Free Antivirus Software

-
Image
Day zero refers to the time since the vulnerability was discovered by software developers. There are two types of zero-day threats. A zero-day vulnerability is a software security flaw that can be reproduced in a browser or application. A zero-day attack is an attempt to install malware on a victim's computer by exploiting a zero-day vulnerability in the program. How Do Zero-Day Threats Arise? As the name suggests, a zero-day vulnerability is not yet known to the developer, antivirus companies, or the general public - zero-day attacks are carried out by cybercriminals who were among other things, vulnerabilities in browsers and e-mail clients are especially often exploited in zero-day attacks due to their widespread distribution among users. How to Recognize a Zero-day Attack? Once discovered by users and developers, these are no longer zero-day threats! This is why zero-day attacks are one of the most difficult types of threats with the most devastating consequences today, but the...
Read more