What you need to know
- Microsoft outlined how it will improve security on Windows 11 at its “Windows Powers the Future of Hybrid Work” event today.
- Microsoft Pluton, Smart App Control, and several other security features will enhance security on future Windows 11 devices.
- Some of the features discussed by Microsoft, such as Config Lock and Microsoft Pluton, are available today and will ship on more PCs in the future.
Microsoft announced several security features at its Windows Powers the Future of Hybrid Work event today. The company plans to increase the security of Windows PCs through hardware improvements, the cloud, and the use of artificial intelligence.
Microsoft Pluton and Windows 11
Microsoft Pluton, a security technology pioneered on the Xbox One, is now capable of securing PCs. Pluton takes a Zero Trust approach and relies on several security features in Windows 11, including TPM 2.0, firmware and identity protection, Direct Memory Access, and Memory Integrity Protection.
Pluton integrates with a PC’s CPU and operating system.
The next release of Windows 11 will have Hypervisor-Protected Code Integrity (HVCI) enabled by default to protect PCs.
The Microsoft vulnerable driver blocklist uses Windows Defender Application Control and HVCI to secure PCs from ransomware attacks that exploit vulnerable drivers. PCs running Windows 11 SE and devices with HVCI will have a blocklist enabled by default.
Ensuring app security
A new feature called Smart App Control will help ensure that only secure apps can run on a PC. Smart App Control uses artificial intelligence to allow processes that are predicted to be safe. Windows 11 will check the processes that an app runs against a model to determine if an application is safe. Smart App Control will ship with new PCs running Windows 11.
Securing personal data
PCs using the feature will require authentication with Windows Hello for Business, a data encryption key, or passwordless credentials to access data.
Rounding out security on Windows 11
Microsoft discussed a handful of other security features for PCs at its event.
In the future, Windows 11 will have Local Security Authority protection enabled by default.
If you’d like to find out more about Microsoft’s plans to secure Windows 11, you can watch the company’s breakout session at its Windows Powers the Future of Hybrid Work event.