Security Improvements in Windows 8

Windows 8 launched this week. It brings a new interface, but under the hood, it introduces a number of new security features.

The most significant change in terms of security is the use of the Unified Extensible Firmware Interface (UEFI) replacing the old BIOS. With UEFI, a computer will only run operating system kernels that have been digitally signed by an approved software vendor. Thus, the user is guaranteed that the operating system has not been tampered with by attackers.

Windows Defender, Microsoft’s Anti-Malware solution is now more comprehensive and is included by default in Windows 8, which is particularly attractive for consumers who will receive Anti-Malware protection out of the box. Organizations, which typically require management capabilities, such as reports on machine update status and alerts of neutralized malware, will still need to look for an enterprise malware solution.

Memory Management in Windows 8 has been rearchitected to provide additional safeguards, such as comprehensive randomization and guard pages. Most of the memory exploit tactics, such as heap sprays, that attackers use to gain control of a Windows 7 machine will now fail under Windows 8, which benefits all applications running on Windows 8.

Lastly, the Windows App Store will have significant impact on security. As users begin to favor the App Store as their main source for applications, overall security will be enhanced because it will be near impossible for an attacker to place a trojan horse in the store. In addition, the App Store will take care of keeping applications updated with the latest security patches.

Personally, I am in line for upgrading my home Windows machine to Windows 8