U ovom ćemo članku raspravljati o raznim novim sigurnosnim značajkama^{(new security features)} i mjerama koje su ugrađene u Windows 11 . Windows 11 je iza ugla i spreman je za izdavanje^{(set to release)} u drugoj polovici 2021. Sve je natjerao da pričaju i pitaju se što je novo u ovoj novoj verziji. Iako je u sustavu Windows 11 uvedeno mnogo novih značajki^{(new features introduced in Windows 11)} , neke features are deprecated/ removed . Ovoga puta, Microsoft se prvenstveno usredotočio na poboljšanje sigurnosnih značajki u sustavu Windows 11^{(Windows 11)} kako bi zaštitio korisnike od raznih novih prijetnji i napada. Novi Windows 11 siguran je dizajnom i ugrađenim zahtjevima.

Microsoft kaže u događaju najave za Windows 11 :

“We have worked closely with our manufacturer and silicon partners to raise security baselines to meet the needs of the evolving threat landscape and the new world of hybrid work and learning.”

Također:

“The new set of hardware security requirements that comes with Windows 11 is designed to build a foundation that is even stronger and more resilient to attacks.”

Microsoft se brine za poboljšanje sigurnosne osnove kroz ugrađeno sigurno pokretanje, sigurnosne značajke hardverske virtualizacije, integritet koda^{(Code Integrity)} zaštićenog hipervizorom i mnogo više implementacija temeljenih na sigurnosti u sustavu Windows 11^{(Windows 11)} .

David Weston , Microsoftov direktor^(Director) sigurnosti poduzeća^(Enterprise) i OS-^{(OS Security)} a , izjavio je da:

“This next generation of Windows will raise the security baseline by requiring more modern CPUs, with protections like virtualization-based security, hypervisor-protected code integrity and Secure Boot built-in and enabled by default to protect from both common malware, ransomware and more sophisticated attacks.”

Pogledajmo sada kako će Windows 11 imati veće sigurnosne značajke u usporedbi s prethodnim izdanjima.

Nove sigurnosne značajke u sustavu Windows 11

Evo novih sigurnosnih značajki koje su ugrađene u Windows 11 :

1. Modul pouzdane platforme (TPM)
2. Podrška za Microsoft Azure atestaciju^{(Microsoft Azure Attestation)} temeljenu na Azureu
3. Nove sigurnosne inovacije^{(New Security Innovations)} poput sigurnosnog procesora Microsoft Pluton
4. Osigurana jezgra računala
5. Microsoft želi da potpuno odbacite lozinke.

Razmotrimo ih detaljno!

1] Modul pouzdane platforme (TPM)

Modul pouzdane platforme^{(Platform Module)} ( TPM ) jedna je od najistaknutijih sigurnosnih značajki u sustavu Windows 11^{(Windows 11)} . TPM je čip koji se koristi za osiguranje povjerljivih i osjetljivih podataka kao što su ključevi za šifriranje, korisničke vjerodajnice i još mnogo toga u pozadini hardverske barijere. Budući da napadači postaju pametniji i koriste napredne tehnike za mijenjanje podataka na vašem računalu, to će vam pomoći zaštititi vaše računalo od zlonamjernog softvera, ransomwarea i drugih cyber napada. TPM čip se dodaje u CPU pojedinačno ili je integriran u matičnu ploču vašeg računala.

Microsoft je postavio TPM kao minimalni zahtjev za pokretanje sustava Windows 11^{(minimum requirement to run Windows 11)} . Dakle, Windows 11^{(Windows 11)} možete pokrenuti samo ako vaše računalo ima ugrađene TPM čipove. Iako neka vrhunska računala koriste TPM čipove. No, sada je to postalo nužnost za korištenje Windows 11 na vašem računalu. Inače, nećete moći nadograditi na Windows 11 .

Kako bi se olakšalo korisnicima, TPM 2.0 čipovi bit će integrirani u sve certificirane Windows 11 sustave kako bi korisnici mogli iskoristiti prednosti sigurnosti podržane hardverskim korijenom povjerenja.

Pročitajte^(Read) : Kako koristiti Windows sigurnost u sustavu Windows 11 za najbolju zaštitu.

2] Podrška za ^(Support)Microsoft Azure atestaciju^{(Microsoft Azure Attestation)} temeljenu na Azureu

Microsoft Azure atestacija^{(Microsoft Azure Attestation)} ( MAA )^(MAA) bazirana na Azureu u osnovi provjerava pouzdanost više platformi prije nego što joj pristupite. Windows 11 ima gotovu podršku za Microsoft Azure atestaciju^{(Microsoft Azure Attestation)} temeljenu na Azureu . Kada korisnici pristupaju osjetljivim resursima u oblaku, MAA omogućuje politike nultog povjerenja^{(Zero Trust)} kako bi osigurao da je platforma sigurna. Pravila podržana Azure atestacijom provjeravaju i identitet i platformu pomažući organizacijama da zaštite resurse organizacije.

Pročitajte^(Read) : Zašto moje računalo nije kompatibilno sa sustavom Windows 11?^{(Why is my PC not compatible with Windows 11?)}

3] Nove sigurnosne inovacije^{(New Security Innovations)} poput sigurnosnog procesora Microsoft Pluton

Windows 11 dolazi s raznim novim sigurnosnim inovacijama. To uključuje hardverski pojačanu zaštitu^{( hardware-enforced stack protection)} steka , sigurnosni procesor Microsoft Pluton^{(Microsoft Pluton security processor)} , itd. To će osigurati zaštitu korisnika od eksploatacije nultog dana i također ojačati sigurnost Zero Trust . Sigurnosni pristup Zero Trust^{(Zero Trust)} u osnovi osigurava provjeru svih i svega što želi pristupiti resursima na privatnoj mreži. Ovo je još jedno važno sigurnosno ažuriranje u sustavu Windows 11^{(Windows 11)} .

Pročitajte^(Read) :  Zahtjevi sustava Windows 11^{(Windows 11 System Requirements)} .

4] Računala sa zaštićenom jezgrom

Računala^(PCs) sa zaštićenom jezgrom dodaju dodatni sigurnosni sloj ispod OS-a kombinirajući identitet, sigurnost temeljenu na virtualizaciji, operativni sustav i zaštitu hardvera i firmvera. Dvostruko su otporniji na zarazu zlonamjernim softverom i napade firmware-a. Omogućuju korisnicima da se sigurno podignu, budu zaštićeni od ranjivosti firmvera, blokiraju neovlašteni pristup i još mnogo toga.

Pročitajte^(Read) : Windows 11 životni ciklus proizvoda i ažuriranje servisiranja^{(Windows 11 Product Lifecycle and Servicing Update)} .

5] Microsoft želi da odbacite lozinke

Prema zadanim postavkama, novi uređaji sa sustavom Windows 11^{(Windows 11)} sada će od prvog dana biti bez lozinki. Nećete morati sada unositi lozinku da biste se prijavili. Uz Windows Hello , Windows 11 prelazi na jače metode provjere autentičnosti uključujući zaključavanje lica , ^(Face)otisak prsta^{(Fingerprint)} , šarenicu^(Iris) i druge biometrijske podatke. IT administratori u poduzećima mogu implementirati Windows Hello for Business koji uključuje detaljnu kontrolu metoda provjere autentičnosti.

Windows 11 prvenstveno se usredotočuje na hardverske sigurnosne zahtjeve kako bi ublažio razne napade firmvera, eksploatacije nultog dana, zaraze zlonamjernim softverom i druge cyber napade. Sva ova nova hardverska sigurnost kompatibilna je s nadolazećim sustavima i uređajima opremljenim Plutonom koji koriste TPM 2.0 sigurnosni čip, uključujući Dell , HP, Acer , ASUS i mnoge druge. Gore opisani dizajn i ugrađene značajke zajedno dodaju dodatne slojeve sigurnosti sustavu Windows 11^{(Windows 11)} . Glavni cilj Microsofta^(Microsoft) ovoga puta je poboljšati produktivnost s poboljšanim skupom ugrađenih sigurnosnih značajki.

Sada pročitajte: ^{(Now read: )}Planirate implementaciju sustava Windows 11?^{(Planning for Windows 11 Deployment?)}

New Security Features in Windows 11

In this article, we will discuss νarious new security features and measures that are incorporated in Windows 11. Windows 11 is making buzz around the corner and is all set to release in the second half of 2021. It has got everyone talking and wondering what’s new in this new version. While there are a lot of new features introduced in Windows 11, some features are deprecated/ removed. This time, Microsoft has primarily focussed on improving the security features in Windows 11 to protect users from various emerging threats and attacks. The new Windows 11 is secure by design and built-in requirements.

Microsoft says in Windows 11 announcement event:

“We have worked closely with our manufacturer and silicon partners to raise security baselines to meet the needs of the evolving threat landscape and the new world of hybrid work and learning.”

Also:

“The new set of hardware security requirements that comes with Windows 11 is designed to build a foundation that is even stronger and more resilient to attacks.”

Microsoft is making sure to improve the security baseline through built-in secure boot, hardware virtualization security features, Hypervisor-Protected Code Integrity, and much more security-based implementations in Windows 11.

David Weston, Microsoft’s Director of Enterprise and OS Security, stated that:

“This next generation of Windows will raise the security baseline by requiring more modern CPUs, with protections like virtualization-based security, hypervisor-protected code integrity and Secure Boot built-in and enabled by default to protect from both common malware, ransomware and more sophisticated attacks.”

Now, let’s have a look at how Windows 11 will have greater security features as compared to previous releases.

New Security Features in Windows 11

Here are the new security features that are incorporated in Windows 11:

1. Trusted Platform Module (TPM)
2. Support for Azure-based Microsoft Azure Attestation
3. New Security Innovations like Microsoft Pluton security processor
4. Secured-core PCs
5. Microsoft wants you to ditch passwords completely.

Let us discuss these in detail!

1] Trusted Platform Module (TPM)

Trusted Platform Module (TPM) is one of the most prominent security features in Windows 11. TPM is a chip that is used to secure confidential and sensitive data like encryption keys, user credentials, and more in the back of a hardware barrier. As attackers getting smarter and using advanced techniques to tamper data on your PC, this will help protect your PC against malware, ransomware, and other cyberattacks. TPM chip is added to the CPU individually or integrated into your computer’s motherboard.

Microsoft has made TPM a minimum requirement to run Windows 11. So, you can run Windows 11 only if your PC has built-in TPM chips. Although some high-end PCs use TPM chips. But, now it has become a necessity for using Windows 11 on your PC. Else, you won’t be able to upgrade to Windows 11.

To make it easier for users, TPM 2.0 chips will be integrated into all certified Windows 11 systems so that customers can take advantage of security backed by a hardware root of trust.

Read: How to use Windows Security in Windows 11 for the best protection.

2] Support for Azure-based Microsoft Azure Attestation

Azure-based Microsoft Azure Attestation (MAA) basically verifies the trustiness of multiple platforms before you access it. Windows 11 has out-of-the-box support for Azure-based Microsoft Azure Attestation. When customers access sensitive resources in the cloud, MAA enables Zero Trust policies to ensure that the platform is secure. Azure Attestation-backed policies verify both identity and platform helping organizations to safeguard organization resources.

Read: Why is my PC not compatible with Windows 11?

3] New Security Innovations like Microsoft Pluton security processor

Windows 11 will come with various new security innovations. These include hardware-enforced stack protection, Microsoft Pluton security processor, etc. This will ensure to protect users from zero-day exploits and also strengthen Zero Trust security. Zero Trust security approach basically ensures to verify everyone and everything that wants to access resources on a private network. This is another important security update in Windows 11.

Read: Windows 11 System Requirements.

4] Secured-core PCs

Secured-core PCs add an extra security layer beneath the OS by combining identity, virtualization-based security, operating system, and hardware and firmware protection. They are twice more resistant to malware infection and firmware attacks. And, they enable users to boot securely, be secure against firmware vulnerabilities, block unauthorized access, and more.

Read: Windows 11 Product Lifecycle and Servicing Update.

5] Microsoft wants you to ditch passwords

By default, the new Windows 11 devices will now be without passwords from day one. You won’t have to enter the password now to log in. With Windows Hello, Windows 11 is moving onto more strong authentication methods including Face lock, Fingerprint, Iris, and other biometrics. IT admins in enterprises can deploy Windows Hello for Business that involves granular control of authentication methods.

Windows 11 primarily focuses on hardware security requirements to mitigate various firmware attacks, zero-day exploits, malware infection, and other cyber attacks. All this new hardware security is compatible with forthcoming Pluton-equipped systems and devices using a TPM 2.0 security chip, including Dell, HP, Acer, ASUS, and many more. The above-discussed design and built-in features combined together add extra layers of security to Windows 11. The main aim of Microsoft this time is to improve productivity with an enhanced set of built-in security features.

Now read: Planning for Windows 11 Deployment?

Related posts

• Windows 11 za tvrtke i poduzeća - nove značajke

• Nove značajke sustava Windows 11: redizajniran početak, traka sa zadacima, korisničko sučelje, izgled za pričvršćivanje

• Kako funkcija dinamičke brzine osvježavanja radi u sustavu Windows 11

• Kako omogućiti ili onemogućiti dinamičku brzinu osvježavanja (DRR) u sustavu Windows 11

• Kako omogućiti i koristiti TPM dijagnostički alat u sustavu Windows 11

• Kako ručno dopustiti blokiranu datoteku ili aplikaciju u Windows Security

• 17 načina za otvaranje upravljačke ploče u sustavima Windows 11 i Windows 10

• Kako dodati i koristiti VPN u sustavu Windows 11 -

• Kako resetirati Windows 11 bez gubitka datoteka -

• Kako nadograditi sa Windows 10 na Windows 11 -

• Kako promijeniti administratora na Windows 11: 5 načina -

• Kako instalirati Windows 11 s USB-a, DVD-a ili ISO-a -

• Kako pregledati i instalirati fontove u sustavima Windows 11 i Windows 10

• Kako pokrenuti kao administrator u sustavu Windows 11: 11 načina -

• Kako promijeniti temu Windows 11 -

• Kako upravljati pouzdanim korijenskim certifikatima u sustavu Windows 11/10

• Kako isključiti Windows 11 (9 načina) -

• Kako vratiti Windows 11 na tvorničke postavke i ukloniti sve -

• 7 načina za zaključavanje računala sa sustavom Windows 11 -

• Novi tipkovnički prečaci u sustavu Windows 11