Avast WEBforum

Other => General Topics => Topic started by: Nesivos on September 17, 2011, 04:52:51 PM

Title: Avast 7 - Windows 8 and Windows Defender
Post by: Nesivos on September 17, 2011, 04:52:51 PM
There is a very interesting and informative article on Windows 8 built in security features over at Building Windows 8.  IMO it is worth the read even though it is obviously biased.

Some comments from the article and the link provided below

Quote
Protecting you from malware
Steven Sinofsky
15 Sep 2011 1:30 PM

One of the things we talk quite a bit about with Windows 8 is making sure Windows is a safe, secure, and reliable computing environment. We have always provided a broad range of solutions for achieving these goals and work closely with a broad range of industry partners. We continue to enhance these capabilities with Windows 8 while making sure you always have choice and control over how to protect and manage your PC. With Windows 8 we are extending the protections provided by Defender to address a broader range of potential threats. Jason Garms, the group program manager of our reliability and security team authored this post that represents work across several teams.  --Steven

Windows Defender

If you don’t have another solution installed, Windows 8 will provide you protection with a significantly improved version of Windows Defender.

Improved protection for all types of malware. The improvements to Windows Defender will help protect you from all types of malware, including viruses, worms, bots and rootkits by using the complete set of malware signatures from the Microsoft Malware Protection Center, which Windows Update will deliver regularly along with the latest Microsoft antimalware engine. This expanded set of signatures is a significant improvement over previous versions, which only included signatures for spyware, adware, and potentially unwanted software.

In addition, Windows Defender will now provide you with real-time detection and protection from malware threats using a file system filter, and will interface with Windows secured boot, another new Window 8 protection feature.

When you use a PC that supports UEFI-based Secure Boot (UEFI will replace the BIOS) (defined in the UEFI 2.3.1 specification), Windows secured boot will help ensure that all firmware and firmware updates are secure, and that the entire Windows boot path up to the antimalware driver has not been tampered with. It does this by loading only properly signed and validated code in the boot path. This helps ensure that malicious code can’t load during boot or resume, and helps to protect you against boot sector and boot loader viruses, as well as bootkit and rootkit malware that try to load as drivers.

The same interfaces for secured boot used by Windows Defender, as well as all APIs used by Windows Defender, are available for use by our antimalware partners to deliver additional protection to Windows customers.

Even though Windows 8 is probably still a year or more away from its RTM, IMO the article is worth the read as it gives us an idea of what MSFT is doing with Windows 8 to aid us all in helping to keep our computers safe.

https://blogs.msdn.com/b/b8/archive/2011/09/15/protecting-you-from-malware.aspx (https://blogs.msdn.com/b/b8/archive/2011/09/15/protecting-you-from-malware.aspx)
Title: Re: Avast 7 - Windows 8 and Windows Defender
Post by: Lisandro on September 17, 2011, 09:54:36 PM
God protect us against all boot time applications that could suffer from it! (from avast boot time, to Acronis True Image, TrueCrypt... etc.).
Title: Re: Avast 7 - Windows 8 and Windows Defender
Post by: Dwarden on September 18, 2011, 06:58:42 AM
this all flies out of Window the second malware authors deploy first UEFI based rootkit :)

TLD5 botnet will then eat the world :)