"Deep Defense" in Windows 7 Antivirus Concept Research

Microsoft said that Windows 7 is the safest Windows ever, but antivirus vendors have refuted it. Which one is the truth? In fact, the truth may not exist, news sometimes only has "angle" issues...

SophosLabs said last week that they installed Windows 7 on a bare metal and based on user account control (UAC) system presets. Configuration, but did not install anti-virus software, and then imported 10 virus samples, found that 8 viruses can attack Windows7 vulnerabilities.

SophosLabs security consultant Chester Wisniewski said that UAC did intercept one of the virus samples. In any case, as previously suggested by him, Windows 7 UAC default configuration does not protect PCs from viruses. Windows 7 does not have Microsoft. Declared so safe. Wisniewski believes that Windows 7 is as disappointing as the previous operating system. But is this really true?

Yes, bad things happen

First of all, as long as it is "execution" is dangerous, so be careful when executing the program. Although Microsoft's security director said: "If the user executes an unknown program on the computer, bad things will happen." But this has a dilemma: we buy a computer to execute the program, that is, to download the download, that is to Playing all kinds of interesting things that are known to be unknown, just don't want to be restricted and don't want to be bound... If we don't run as long as it is an unknown program, what fun is it to use a computer?

My opinion is that users can "do their best" to do something to improve the problem, such as "the unclear program does not run it", "the company's computer should be used as required"," Computers must be equipped with anti-virus software." If you work harder, you will have one more guarantee. That's it. The current computer world is like a tropical rain forest, but it is full of poisonous snakes, arrow frogs and piranhas. It is better to save yourself than to complain.

The Microsoft Security Director believes that using a computer is a good way to execute a virus, and then that Windows 7 is not secure - this is too arbitrary. On this point, I have to say that I have really seen users indiscriminately pressing and arbitrarily executing a pass. It is useless to control your poison and no poison. Let's say it twice. So, this kind of testing by Shophos - although rudimentary, a little arbitrary - is not impossible. However, the Microsoft Security Director also agreed that Windows originally needed anti-virus software, and even Microsoft itself provided a free solution for users to use.

So, no matter what they are arguing, in short, everyone remembers that this conclusion is right: running Windows must be equipped with anti-virus software - whether it is safer Windows. However, there is nothing to be disappointed with, and life is like this.

Windows 7's "Deep Defense"

The Microsoft Security Director mentioned an interesting concept: the defense-in-depth concept, what is this?

This is the so-called "defense principle of the siege." You have to strengthen defenses from the inside out, in order to more effectively resist foreign enemies.

To keep the country safe, you have to build a city wall, a city pool, and set up a guard post outside the city to send patrol members. If possible, it is best to have people squatting and living outside the city. If so, even if there are foreign enemies. Intrusion (invasion of foreign enemies is unavoidable), and your defense will not be broken. Shophos believes that Windows 7 is not safer. It seems to me that "Windows 7 is still likely to be broken by viruses", but this is actually a reasonable conclusion (Which city is always safe and will never be broken?).

And Microsoft's security director said that Windows 7 was attacked by the virus "originally" is possible, so Windows7 originally needed anti-virus software. But Windows 7 does intensify every aspect of Windows, trying to make Windows 7 "not so easy to break." He gave some links:

● UAC function

● Windows core protection capabilities

● Windows services (Windows Services) enhancements

● Random bits Address Space Arrangement (ASLR)

● Data Execution Prevention (DEP)

These things are very simple, that is, "trying to make Windows more stable from the inside out", this is "depth defense." Microsoft's security director wants to express: Some people say that Windows is invincible? no! So Windows needs anti-virus software can be said to be authentic! If you don't install anti-virus software, it's horrible! Therefore, even Microsoft, it also provides anti-virus software for customers!

Are you clear about this?

However, this is just my personal "interpretation" and does not represent an official opinion.

Some viruses say that they are anti-virus software

I have seen a miracle about the implementation of "unknown programs", which can be said for reference.

Friends father's computer, installed an anti-virus software, no brand name, it is called AntiVirus, cool! One day said that the computer is slow, I took it to see... I am deeply disturbed by this nameless anti-virus software - in fact, this anti-virus software is a Trojan software!

I asked my friend: Why is this anti-virus software installed? No factory, no cards, how strange?

A friend said: My dad is online for a certain day, suspected of poisoning. I can see that the anti-virus software can be installed on the webpage to install anti-virus. I ordered the software.

I can only say that ninety-nine is a virus or a Trojan. But the friend's father is not a computer expert, just a general user. What if there is no concept for such things?

The average company will use the so-called "policy editor" to block all "behaviors" and "pathways" that may cause virus infection: USB port prohibits reading and writing; use "front view" The column "lists all the software that is allowed to execute, the viruses that are not listed... and the game--cannot be executed! The computer does not have a CD-ROM drive; of course, you should install anti-virus software; also "Do not install or remove any preset programs." After these have been done, your computer should be much safer, call...

As for the average person, there is no MIS staff to help you lock the computer, and the layers are checked... At least, I suggest you install one. Set the anti-virus software you have heard!