===Address space layout randomization improvements===
[[Address space layout randomization]] (ASLR) introduced in Windows Vista<ref name="ASLRVista">{{cite web |url=http://blogs.msdn.com/michael_howard/archive/2006/05/26/608315.aspx |title=Address Space Layout Randomization in Windows Vista |last=Howard |first=Michael |date=May 26, 2006 |publisher=[[Microsoft]] |work=[[Microsoft Developer Network|MSDN]] |archive-url=https://web.archive.org/web/20060529215417/http://blogs.msdn.com/michael_howard/archive/2006/05/26/608315.aspx |archive-date=May 29, 2006 |access-date=March 20, 2023}}</ref> — andwas improved in Windows 8§<ref name="Security8">{{cite web |url=https://technet.microsoft.com/en-us/library/dn169048.aspx |title=What's Changed in Security Technologies in Windows 8 |author=[[Microsoft]] |date=April 12, 2013 |work=[[Microsoft TechNet|TechNet]] |access-date=April 19, 2015 |archive-date=July 8, 2015 |archive-url=https://web.archive.org/web/20150708125243/https://technet.microsoft.com/en-us/library/dn169048.aspx |url-status=live }}</ref> —and has been updated in Windows 8.1 to allow randomization to be unique across devices.<ref name="Security8.1">{{cite web |url=https://technet.microsoft.com/en-us/library/dn344918.aspx |title=What's Changed in Security Technologies in Windows 8.1 |author=[[Microsoft]] |date=July 24, 2013 |work=[[Microsoft TechNet|TechNet]] |access-date=April 19, 2015 |archive-date=February 17, 2015 |archive-url=https://web.archive.org/web/20150217073244/https://technet.microsoft.com/en-us/library/dn344918.aspx |url-status=live }}</ref>
===Biometrics===
Line 230:
===Protected processes===
Protected processes introduced in Windows Vista for [[digital rights management]]] have been extended in Windows 8.1 to support additional scenarios along with a new ''Protected Process Light'' scheme. In Windows Vista, processes for digital rights management were either protected or unprotected. With the new scheme in Windows 8.1, processes can be assigned varying levels of protection, and core operating system components such as the [[Local Security Authority Subsystem Service]] can be protected by this scheme to prevent reading memory and code injection by non-protected processes.<ref name="LSA">{{cite web |url=https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection |title=Configuring Additional LSA Protection |date=September 30, 2022 |publisher=[[Microsoft]] |access-date=March 14, 2023}}</ref>
