Tag: enhancements

Windows 7 Security Evolution

October 07, 2009 by Jason

Confronted with increasingly bulletproofed Windows operating systems, the threat environment shifted toward targeting vulnerabilities in the code designed to run on top of the platform. With security enhancements such as User Account Control, Address Space Layout Randomization, Kernel Patch Protection and driver signing, but also with the new development methodology set in place via the Microsoft Security Development Lifecycle, vulnerabilities in Windows Vista and its successor Windows 7 have become harder to exploit, in the eventuality that attackers do come across critical security holes.

The biggest advantage in terms of security Vista and Windows 7 have over precursor Windows clients is the Security Development Lifecycle. And with the threat environment changing focus onto third-party Windows applications, Microsoft is ready to share the SDL secrets with third-party developers. An illustrative example in this regard is the Microsoft Security Development Lifecycle (SDL): Developer Starter Kit.

“The Microsoft SDL – Developer Starter Kit offers content, labs, and training to help you establish a standardized approach to rolling out the Microsoft Security Development Lifecycle (SDL) in your organization—or enrich your existing development practices,” Microsoft revealed.
Read More»

Fix Vista’s Safely Remove Hardware Mechanism

September 05, 2007 by Jason

The Safely Remove Hardware mechanism is by no means something new to Windows Vista. In fact the feature has only survived into Vista with little to no enhancements. Essentially, Safely Remove Hardware is an integer part of the Vista model for managing Plug and Play devices, designed to notify the operating system that a certain item will be removed. The feature will make sure that there is no more interaction between Windows Vista and the Plug and Play hardware attached in order to streamline the removal of specific devices without having to shut down the operating system and without leading to loss of data.

“Some Plug and Play devices can be installed or removed while the system is running. For example, USB, IEEE 1394, and PC Card devices can be added to and removed from a fully powered system. When such hardware is added or removed, Read More»