Microsoft Announces Device Guard For Windows 10

jones_supa writes: Microsoft has announced a new feature for Windows 10 called Device Guard, which aims to give administrators full control over what software can or cannot be installed on a device. "It provides better security against malware and zero days for Windows 10 by blocking anything other than trusted apps—which are apps that are signed by specific software vendors, the Windows Store, or even your own organization. ... To help protect users from malware, when an app is executed, Windows makes a determination on whether that app is trustworthy, and notifies the user if it is not. Device Guard can use hardware technology and virtualization to isolate that decision making function from the rest of the Windows operating system, which helps provide protection from attackers or malware that have managed to gain full system privilege." It's intended to be used in conjunction with traditional anti-virus, not as a replacement.

Comments

Re:FTFY

[BuckaBooBob]

If MS was capable of programming a installation process that can't be circumvented then drive-by-downloads of malware wouldn't exist.,..

Just saying this looks like another layer of software that will only raise the barrier of entry for malware a little bit... Buggy software is buggy software no matter how many layers of buggy software you have ontop of it.