Features new to Windows 8: Difference between revisions

Revision as of 20:21, 16 March 2023

Revision as of 17:44, 20 March 2023

Line 209:

==Security==

===Address space layout randomization===

[[Address space layout randomization]] (ASLR) introduced in Windows Vista<ref name="ASLRVista">{{cite web |url=http://blogs.msdn.com/michael_howard/archive/2006/05/26/608315.aspx |title=Address Space Layout Randomization in Windows Vista |last=Howard |first=Michael |date=May 26, 2006 |publisher=[[Microsoft]] |work=[[Microsoft Developer Network|MSDN]] |archive-url=https://web.archive.org/web/20060529215417/http://blogs.msdn.com/michael_howard/archive/2006/05/26/608315.aspx |archive-date=May 29, 2006 |access-date=March 20, 2023}}</ref> — and improved in Windows 8§<ref name="Security8">{{cite web |url=https://technet.microsoft.com/en-us/library/dn169048.aspx |title=What's Changed in Security Technologies in Windows 8 |author=[[Microsoft]] |date=April 12, 2013 |work=[[Microsoft TechNet|TechNet]] |access-date=April 19, 2015 |archive-date=July 8, 2015 |archive-url=https://web.archive.org/web/20150708125243/https://technet.microsoft.com/en-us/library/dn169048.aspx |url-status=live }}</ref> — has been updated in Windows 8.1 to allow randomization to be unique across devices.<ref name="Security8.1">{{cite web |url=https://technet.microsoft.com/en-us/library/dn344918.aspx |title=What's Changed in Security Technologies in Windows 8.1 |author=[[Microsoft]] |date=July 24, 2013 |work=[[Microsoft TechNet|TechNet]] |access-date=April 19, 2015 |archive-date=February 17, 2015 |archive-url=https://web.archive.org/web/20150217073244/https://technet.microsoft.com/en-us/library/dn344918.aspx |url-status=live }}</ref>

===Biometrics===

Windows 8 introduces virtual [[smart card]] support. A [[public key certificate|digital certificate]] of a smart card can be stored onto a user's machine and protected by the Trusted Platform Module, thereby eliminating the need for the user to physically insert a smart card, though entering a PIN is still required. Virtual smart card support enables new [[two-factor authentication]] scenarios.<ref name="Security8">{{cite web |url=https://technet.microsoft.com/en-us/library/dn169048.aspx |title=What's Changed in Security Technologies in Windows 8 |author=[[Microsoft]] |date=April 12, 2013 |work=[[Microsoft TechNet|TechNet]] |access-date=April 19, 2015 |archive-date=July 8, 2015 |archive-url=https://web.archive.org/web/20150708125243/https://technet.microsoft.com/en-us/library/dn169048.aspx |url-status=live }}</ref> Windows 8.1 improves this functionality by simplifying the device enrollment process for virtual smart cards and introduces additional virtual smart card functionality such as certificate attestation for Metro-style applications,<ref name="Security8.1">{{cite web |url=https://technet.microsoft.com/en-us/library/dn344918.aspx |title=What's Changed in Security Technologies in Windows 8.1 |author=[[Microsoft]] |date=July 24, 2013 |work=[[Microsoft TechNet|TechNet]] |access-date=April 19, 2015 |archive-date=February 17, 2015 |archive-url=https://web.archive.org/web/20150217073244/https://technet.microsoft.com/en-us/library/dn344918.aspx |url-status=live }}</ref> and enrollment and management features via WinRT APIs.<ref name="SecurityRevisited">{{cite web |url=http://blogs.technet.com/b/canitpro/archive/2013/08/08/windows-8-1-preview-security-re-visited.aspx |title=Windows 8.1 Preview Security Re-visited |last=Roman |first=Pierre |date=August 8, 2013 |publisher=[[Microsoft]] |work=TechNet Blogs |access-date=June 6, 2015 |archive-date=July 10, 2015 |archive-url=https://web.archive.org/web/20150710173556/http://blogs.technet.com/b/canitpro/archive/2013/08/08/windows-8-1-preview-security-re-visited.aspx |url-status=live }}</ref>

Windows 8.1 features pervasive support for biometric authentication throughout the operating system,<ref name="What'sNewIT">{{cite web |url=https://technet.microsoft.com/en-us/windows/dn140266.aspx |title=Windows 8.1 - What's New, IT Pro Features, Devices, UI |publisher=Microsoft |work=TechNet |access-date=February 23, 2015 |archive-date=February 11, 2015 |archive-url=https://web.archive.org/web/20150211024857/https://technet.microsoft.com/en-US/windows/dn140266.aspx |url-status=live }}</ref> includes a native [[fingerprint]] registration feature,<ref name="Biometrics">{{cite web |url=https://technet.microsoft.com/en-us/library/dn344916.aspx |title=What's New in Biometrics in Windows 8.1 |publisher=Microsoft |work=TechNet |date=July 24, 2013 |access-date=February 22, 2015 |archive-date=January 29, 2015 |archive-url=https://web.archive.org/web/20150129164454/https://technet.microsoft.com/en-us/library/dn344916.aspx |url-status=live }}</ref> and enables the use of a fingerprint for tasks such as signing into a device, purchasing apps from the Windows Store, and consenting to authentication prompts (e.g., [[User Account Control]]). Windows 8.1 also introduces new WinRT APIs for biometrics.<ref name="SecurityRevisited"/><ref name="Biometrics"/><ref name="BiometricsPFE">{{cite web |url=http://blogs.technet.com/b/askpfeplat/archive/2014/01/20/biometrics-in-windows-8-1.aspx |title=Biometrics in Windows 8.1 |last=Morowczynski |first=Mark |date=January 19, 2014 |publisher=Microsoft |work=TechNet Blogs |access-date=February 23, 2015 |archive-date=April 2, 2015 |archive-url=https://web.archive.org/web/20150402151123/http://blogs.technet.com/b/askpfeplat/archive/2014/01/20/biometrics-in-windows-8-1.aspx |url-status=live }}</ref>

Line 224 ⟶ 227:

===Family Safety===

Windows 8 integrates [[Windows Live Family Safety]] into the operating system, allowing parents to restrict user activity via web filtering, application restriction, and computer usage time limits.<ref>{{cite web | url=http://blogs.msdn.com/b/b8/archive/2012/05/14/keeping-your-family-safer-with-windows-8.aspx | title=Keeping your family safer with Windows 8 | publisher=Microsoft | work=Building Windows 8 | date=May 14, 2012 | access-date=May 16, 2013 | first1=Phil | last1=Sohn | editor-first=Steven | editor-last=Sinofsky | archive-date=May 21, 2013 | archive-url=https://web.archive.org/web/20130521140319/http://blogs.msdn.com/b/b8/archive/2012/05/14/keeping-your-family-safer-with-windows-8.aspx | url-status=live }}</ref><ref>{{cite web | url=https://www.engadget.com/2012/05/14/windows-8-family-safety-feature-chaperones-underage-users-thro/#disqus_thread | title=Windows 8 'Family Safety' feature chaperones underage users through the World Wild Web | publisher=[[Engadget]] | work=[[Aol]] | date=May 14, 2012 | access-date=May 16, 2013 | first1=Joseph | last1=Volpe | archive-date=June 6, 2013 | archive-url=https://web.archive.org/web/20130606193005/http://www.engadget.com/2012/05/14/windows-8-family-safety-feature-chaperones-underage-users-thro/#disqus_thread | url-status=live }}</ref><ref>{{cite web | url=http://www.pcworld.com/article/255582/microsoft_win8_simplifies_improves_parental_monitoring_of_kids_computer_activities.html | title=Microsoft: Win8 Simplifies, Improves Parental Monitoring of Kids Computer Activities &#124; PCWorld Business Center | publisher=[[PC World]] | work=[[International Data Group|IDG]] | date=May 14, 2012 | access-date=May 22, 2013 | first1=Juan Carlos | last1=Perez | archive-date=May 25, 2013 | archive-url=https://web.archive.org/web/20130525092553/http://www.pcworld.com/article/255582/microsoft_win8_simplifies_improves_parental_monitoring_of_kids_computer_activities.html | url-status=live }}</ref> Certain [[Parentalparental controls]] functionality, introduced in [[Windows Vista]], was previously partiallymade removedunavailable in [[Windows 7]] andin made a partfavor of Windows Live Family Safety instead.<ref>{{cite web |url=http://msdn.microsoft.com/en-us/library/dd630560(VS.85).aspx |title=Windows 7 Parental Controls Changes Overview |publisher=Msdn.microsoft.com |access-date=July 9, 2013 |archive-date=April 1, 2021 |archive-url=https://web.archive.org/web/20210401084021/https://docs.microsoft.com/en-us/windows/win32/parcon/what-s-new-in-windows-7-parental-controls?redirectedfrom=MSDN |url-status=live }}</ref> A notable change in Family Safety is that administrators can now specify time periods for computer usage. For example, an administrator can restrict a user account so that it can only remained signed in for a total time period of one hour. In previous versions of Windows, administrators could only restrict accounts based on the time of day.<ref name="FamilySafety">{{cite web |url=https://msdn.microsoft.com/en-us/library/windows/desktop/jj155495%28v=vs.85%29.aspx |title=What's New in Windows 8 Family Safety |publisher=Microsoft |work=Windows Dev Center |access-date=February 22, 2015 |archive-date=January 18, 2015 |archive-url=https://web.archive.org/web/20150118095220/http://msdn.microsoft.com/en-us/library/windows/desktop/jj155495(v=vs.85).aspx |url-status=live }}</ref>

===Protected processes===

Protected processes introduced in Windows Vista for [[digital rights management]]] have been extended in Windows 8.1 to support additional scenarios along with a new ''Protected Process Light'' scheme. In Windows Vista, processes for digital rights management were either protected or unprotected. With the new scheme in Windows 8.1, processes can be assigned varying levels of protection, and core operating system components such as the [[Local Security Authority Subsystem Service]] can be protected by this scheme to prevent reading memory and code injection by non-protected processes.<ref name="LSA">{{cite web |url=https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection |title=Configuring Additional LSA Protection |date=September 30, 2022 |publisher=[[Microsoft]] |access-date=March 14, 2023}}</ref>

===Startup security===