Windows Bolsters Security with Runtime Integrity Safeguards

Post Views: 14

Microsoft Bolsters Windows Security with Runtime Integrity Safeguards

Microsoft has announced plans to bolster the security of its Windows operating system with the introduction of runtime integrity safeguards, a feature designed to ensure that only properly signed applications, drivers, and services can run on the platform.

Windows Baseline Security Mode

As part of the company’s Secure Future Initiative, which was unveiled in November 2023, the new Windows Baseline Security Mode will be enabled by default, providing an additional layer of protection against malicious software. This enhancement will verify the digital signatures of all executable code before allowing it to run, thereby preventing unsigned or tampered-with code from executing.

Exceptions and Overrides

In cases where exceptions are necessary, users and administrators will have the option to override the safeguards, allowing them to grant specific permissions to certain applications or services. Additionally, developers will be able to determine whether these protections are active and whether any exceptions have been granted, giving them greater insight and control over the conditions under which their apps run.

Secure Boot Certificates

The introduction of Windows Baseline Security Mode coincides with the announcement that Secure Boot certificates will begin to expire in June 2026, and that refreshed certificates will be rolled out to supported Windows releases. Secure Boot is a critical security feature that protects devices from the moment they are powered on, preventing malicious code from loading during the boot process.

User Transparency and Consent

To provide users with greater visibility into Windows’ security decisions, Microsoft has also introduced User Transparency and Consent, a feature that notifies users whenever an application attempts to access sensitive resources or install additional software. The prompts will be clear and actionable, allowing users to make informed decisions about which applications they trust. Users will also have the ability to review their choices and make changes as needed.

Security and Privacy Improvements

Microsoft’s goal with these security and privacy improvements is to provide users with greater visibility and control over how applications access their files, camera, microphone, and other sensitive resources. The company aims to achieve this by giving users and IT administrators better visibility into app behavior, while also providing developers with the tools and APIs needed to adopt these new security and privacy standards.

Rollout and Transition

The rollout of these enhancements will occur in phases, with Microsoft working closely with developers and partners to gather feedback and guidance. The company is committed to ensuring a smooth transition and providing developers with the time and support needed to adapt to the new security and privacy posture of Windows.