Windows 8 security for business

Windows 8 security for business
Explore the new security features in Windows 8

Hardly a week goes by without yet another data breach in the news; even if your business isn't a target for the kind of routine hacking attempts the government has been warning about, you need to care about whether your confidential information and your customer files are safe.

Additionally you need to care about malware on your users' PCs because at the very least it slows them down, interferes with your productivity and clogs up your network.

So what can security features can Windows 8 offer a business?

For a start, the way the Windows kernel allocates memory has been rewritten to make it harder for viruses to attack.

There are now much stricter limits on how much memory a program can ask for, malware has to work harder to request enough memory to overflow the buffer it's supposed to fit in without getting shut down. Additionally Windows 8 implements 'guard pages' around code, and if data overflows into the guard pages, or if the malware targets the wrong memory while it's trying to attack, then Windows can shut it down.

Memory allocations now start in random locations, rather than based on predictable locations or values that malware could change so it knows where the memory it wants to attack is. And when programs no longer need memory, Windows is more careful about keeping track of it so viruses can't hijack it.

One reason Windows 8 won't run on some older PCs is security; if a CPU doesn't support NX instructions (which mark memory used to store data as Non eXecutable so you can't run code from it), it won't run Windows 8. Unlike the similar Data Execution Prevention (DEP) in Windows 7, that works whether software is written to use it or not.

New Intel Ivy Bridge CPUs also have Supervisor Mode Execution Protection (SMEP or OS Guard as Intel calls it) to stop the CPU running any memory pages that are marked as 'user' (so just for data) rather than 'kernel'.

Malware protection from bootup

Having Microsoft's own anti-virus software built into Windows means PCs are protected as soon as you buy or upgrade them, and you will then have the same level of protection on all your PCs.

For a smaller office, that could be an improvement over getting an assortment of anti-virus software with each new PC you buy, especially as you don't have to worry about renewing licences at a different time for each system (or indeed, budgeting extra for PC anti-virus software).

Anti-virus software like Defender starts up before Windows 8 finishes booting

Windows 8 security for business

If you choose to run different anti-virus software make sure it has the same Early Load Anti Malware as Defender (almost all the big name security software does but some commercial packages haven't added this yet).

ELAM loads your anti-virus software before Windows finishes booting, so before any malware that's already on the PC can interfere with it. And if it finds malware trying to interfere with the operating system it will automatically replace the Windows components from the internal Side by Side store.

Users don't get a warning is this happens, because the principle in Windows 8 is to only notify you when there's something you can actually do; instead it enters an event in the Action Centre and in the security log so you'll see it if you're monitoring PC security remotely.

Getting malware onto a PC will be a little harder now that the SmartScreen service is built into Windows; this is the reputation checking service for executable files that's in IE 9 and 10, but it now checks files you access from a network share or USB drive as well as executables you download with a different browser.

Instead of looking for virus signatures SmartScreen checks whether the file you're looking at is frequently and safely downloaded or if it's a new file that hasn't been seen before even though it has the same filename as a commonly used program.

TOPICS
Contributor

Mary (Twitter, Google+, website) started her career at Future Publishing, saw the AOL meltdown first hand the first time around when she ran the AOL UK computing channel, and she's been a freelance tech writer for over a decade. She's used every version of Windows and Office released, and every smartphone too, but she's still looking for the perfect tablet. Yes, she really does have USB earrings.

Latest in Windows
A young woman is working on a laptop in a relaxed office space.
I’ll admit, Microsoft’s new Windows 11 update surprised me with its usefulness, providing accessibility fixes, a gamepad keyboard layout, and PC spec cards
Microsoft Surface Laptop and Surface Pro devices on a table.
Hate Windows 11’s search? Microsoft is fixing it with AI, and that almost makes me want to buy a Copilot+ PC
girl using laptop hoping for good luck with her fingers crossed
Windows 11 24H2 seems to be a massive fail – so Microsoft apparently working on 25H2 fills me with hope... and fear
A woman sitting in a chair looking at a Windows 11 laptop
It looks like Microsoft might have thought better about banishing Copilot AI shortcut from Windows 11
Using Zipped files and folders in Windows 11
Windows 11 should soon be faster at extracting files from compressed ZIPs – and it’s about time, frankly
Xbox Wireless Controller
Microsoft is adding a powerful new feature for using Xbox controllers with Windows 11
Latest in News
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
EA Sports F1 25 promotional image featuring drivers Oscar Piastri, Carlos Sainz and Oliver Bearman.
F1 25 has been officially announced, with this year's entry marking a return for Braking Point and a 'significant overhaul' for My Team mode
Garmin clippd integration
Garmin's golf watches just got a big software integration upgrade to help you improve your game
Robert Downey Jr reveals himself as Doctor Doom to a delighted crowd at San Diego Comic-Con 2024
Marvel is currently revealing the full cast for Avengers: Doomsday, and I think it's going to be a long-winded announcement
Samsung QN90F on yellow background
Samsung announces US prices for its 2025 mini-LED TV lineup, and it’s good and bad news
Nintendo Switch Lite
Forget the Nintendo Switch 2, the original Switch is getting one last hurrah in a surprise Nintendo Direct tomorrow