With Vista's path, Microsoft has gradually realized the real needs of users - easy to use, stable, secure, and efficient, so there is a new generation of Microsoft's peak - Windows7. The security protection makes Windows 7 gradually accepted by users, and more and more people have already adopted Windows 7 as their preferred operating system. Some people even boasted that the use of Win7 does not need to install kill soft, "streaking" can "swimming" the Internet. "Cow" out of this rhetoric, I believe is not groundless, then how in the end of Win7 security? Is it true, "cow" and said, Win7 can use the "streaking" mean?
Perhaps the answer is yes, Win7's security protection system is mainly composed of a complete protection system, including internal and external firewalls, WindowsDefender (malicious program scanning tool), IE8, user account control, data execution protection and so on. And they are not their own camps, but under the unified scheduling of the "operation center", they cooperate to form a protection against system security.
security first off -
system firewall in WindowsXP (hereinafter referred to as WinXP) era, many of my friends have likened it to the firewall, because it can only be screened for inbound connections For a Trojan with a rebound port, it is easy to penetrate it, and the protection effect is not satisfactory. Even when installing some soft kills, you will be prompted to turn off the system firewall, which shows that its function is weak. In Win7, in addition to the original "Windows Firewall", an "Advanced Security Windows Firewall" has been added. For the sake of narration, here we refer to "Advanced Security Windows Firewall" as "Advanced Firewall".
Windows Firewall to provide primary protection
Win7 did not abandon the traditional "Windows Firewall", but compared with WinXP, more out of control for private and public networks (Refer to Advanced Firewall section). By default, Windows Firewall allows all outbound connections while blocking all inbound connections. To allow a program to make an inbound connection, just check it. This setting is simple, but it is very effective for filtering inbound connections, because it is only a green light for a small number of programs that users need when blocking all inbound connections. Control is in the hands of the users themselves. . In addition, if a program is still in the blocking state, Windows Firewall will automatically pop up a dialog window when the program is running, prompting the user to take permission or rejection, so as to avoid affecting normal work.
Therefore, Windows Firewall to block inbound connections on both effective and convenient. Generally suitable for environments with less high security requirements, mainly for the general user community.
Open the Control Panel, click the "Windows Firewall → Allow a program or feature through Windows Firewall" to open the settings interface. By default, the items we choose are grayed out (not available), and you must click Change Settings to modify the options below. This is actually a process of privilege escalation, because there is no permission to modify the settings before clicking it. When clicked, the user account control dialog box will pop up. At this time, you must click "Yes" to change, otherwise it cannot be performed. It is estimated that everyone has encountered anti-virus software, the firewall is shut down by malicious programs, and the use of user account control is actually a barrier, if the user does not actively promote the permissions, it can not be changed, malware does not work. Meanwhile, in order to simplify the operation
, user account control is divided into four levels. In the highest level 1 state, changing the settings will pop up the user account control dialog; at the second and third levels (from top to bottom), no dialog pops up, but user account control still works; at level 4 It can be modified directly (not recommended).