Windows 7 Operating System Security

An operating system is always developed keeping in mind the advantages and disadvantages of the microprocessors of that time. The hardware should always be at par with the software and vice versa. I am actually trying to point at the 64 bit implementation of the Windows 7 on Intel Core vPro processors. Windows 7 has gone through a Security Development Life Cycle or SDL in which technical aspects were taken into account. To get assistance on computer security, consult a tech support expert. Let us discuss the outcome and implementation of it as seen in the operating system.

1) Data Execution Prevention or the DEP feature of the OS executes the ED it or the Execute disable bit in Intel Processors against computer viruses that uses the buffer-flow technique for corrupting the computer.

2) Address Space Layout Randomization (ASLR) is another worry factor for those hackers who target specific memory address locations. Imagine that the critical areas of your hard drive where data and other system files reside are being hacked to the level of specific addresses but if the address locations are randomized then no matter where the data resides, it will be difficult for any malicious code to detect it and bring harm to the computer. Cool idea isn't it?

3) Safe Structured Exception Handling. What is that? Well, an exception is a situation which is other than natural and needs to be taken care in a specific manner. This, in programmed structures are done in a specific way so that subroutines are robust enough when due to a virus infection or system file corruption an unwanted situation arise in a computer.

4) Do not forget the Kerberos v5 a protocol for encryption that is used to send passwords over the internet. The question is why should we do so? The answer is that even when you are logging into a website you need to put a password which is again using the internet as the carrier.

5) There are a number of tools which enables us to look after the health of the operating system like the Event Viewer and the UAC (User Account Control) which gives you the required security and at the same time better tools to dive into the changes that went on in the recent past and created the problem you are facing now with the computer.

All said and done, the question still arises as to why do we still get virus infections in our computer? The answer is that no machine in this world is fully perfect and the war between the good and the bad continues no matter whether one wins the temporary game against the other or not. The malicious-code writers are still there. Consult a good technician for total PC maintenance and virus removal. It is not always the branded antivirus software that can give you total security form malicious code. The wireless connectivity between your router and the computer, encrypting your mails, configuring your antivirus cum firewall are some simple ways that actually serves your purpose.


Source : http://goo.gl/AOlir

Windows 7 Security Tools

Security features in an operating system is still the top concern for IT professionals. Therefore, it is quite natural questions regarding what Microsoft has done to secure Windows 7.

Windows 7 draws heavily on the security foundations of Vista the most secure version of the Windows client to date – while enhancing auditing and the User Account Control experience. AppLocker in the new Windows 7 helps IT control what software can run in their environment. Windows 7 also improves the core features of BitLocker Drive Encryption with the introduction of BitLocker To Go for removable storage devices.

AppLocker in Windows 7 not only helps in removing unknown applications but also provides security. With the higher risks of malware infections, the user can’t be certain whether they are running the approved and licensed software. Sometimes, the non-productive applications are downloaded by the users which are not compatible with business applications, which hampers the performance on the local desktop.
The organizations always look for ways to have more control over their desktop environment through a variety of lock down schemes. If the user run the system as standard, non administrative, then he cannot eliminate unknown software in the organization.

Keeping all this in view, Microsoft Windows 7 provides solution for application control in the enterprise with the introduction of AppLocker, which is a flexible method that allows administrators to specify exactly what is allowed to run in their desktop environment. It keeps unlicensed software and malwares from running in the desktop environment. It also stops the user to run application that consumes unnecessary network bandwidth or destabilize desktop environment or increase help desk support cost. It allows the users to install and run only approved applications.

AppLocker works through three rule types: allow, deny, and exception. Allow rules limit the execution of application to a “known good list” of applications and blocks the else, whereas Deny rule works opposite to Allow rule as it only allows the execution of the applications except on the list of “known bad” application. And Exception rules allow you to exclude files from allow/deny rule. Greater flexibility is also provided by AppLocker as multiple configurable policies are supported by it. AppLocker through new tools and wizards provides great benefit to IT administrators. Automatically generating rules and importing/exporting rules are easy to create and maintain.

Thus, Windows 7 AppLocker not only provides defense and security against malicious software but also provides operational benefits.

Microsoft has markedly improved Windows Vista’s BitLocker in its latest Windows 7. The tool, which is the best solution for Drive Encryption, is available in the Ultimate edition that helps the user by encrypting the entire data. Once you turn on the BitLocker, any file on the drive will be automatically encrypted.

BitLocker feature in Vista was too complex as the user first needed to shrink the partition to create the partition for BitLocker which took a lot of energy from the user, but this is quite simplified in Windows 7. You simply have to go to System and Security in the control Panel, turn on the BitLocker and the rest will be done by Drive Preparation tool.
Unlike Vista, BitLocker partition is already available in Windows 7. The tool can easily boot up. It takes only 30 seconds in encryption process for 1 GB.

However, there are some system requirements to use BitLocker. Your computer should be provided with Trusted Platform Module running version 1.2 otherwise you need to save a start up key on a removable device. Primary Partition, at least of 1.5 GB, should be available which needs to be marked as active partition as it is used as boot manager to boot the system. And for data storage, you need another primary partition.

You can boot up Windows 7 once the system drive is encrypted, but USB stick should be present. If the system drive is not available, then you should know the Rcovery Key or Recovery Password. Windows 7 selects 48 digits Recovery Password. New Group Policy settings has also been included in Windows 7 unlike Vista. Moreover, the new operating system also supports New Recovery option, the Data Recovery Agent.

BitLocker To Go is a new feature of Windows 7 that gives lockdown treatment to the portable devices that can be easily misplaced.