Reply to thread

Message

<blockquote data-quote="Stopspying" data-source="post: 893573" data-attributes="member: 69368">&quot;Microsoft is testing a new Windows 10 security feature dubbed Kernel Data Protection (KDP) and designed to block malicious actors from corrupting drivers and software running in the Windows kernel.&quot;For example, we’ve seen attackers use signed but vulnerable drivers to attack policy data structures and install a malicious, unsigned driver,&quot; Microsoft <a href="https://www.microsoft.com/security/blog/2020/07/08/introducing-kernel-data-protection-a-new-platform-security-technology-for-preventing-data-corruption/">said </a>on the Security Kernel Core Team blog. &quot;KDP mitigates such attacks by ensuring that policy data structures cannot be tampered with.&quot;Besides adding memory and security protection to Windows 10 devices, KDP also comes with several added benefits, including: &nbsp; &nbsp; • Performance improvements – KDP lessens the burden on attestation components, which would no longer need to periodically verify data variables that have been write-protected• Reliability improvements – KDP makes it easier to diagnose memory corruption bugs that don’t necessarily represent security vulnerabilities• Providing an incentive for driver developers and vendors to improve compatibility with virtualization-based security, improving adoption of these technologies in the ecosystem&quot;[URL unfurl=&quot;true&quot;]https://www.bleepingcomputer.com/news/security/microsoft-testing-new-windows-10-kdp-anti-malware-protection/[/URL]</blockquote>

[QUOTE="Stopspying, post: 893573, member: 69368"] "Microsoft is testing a new Windows 10 security feature dubbed Kernel Data Protection (KDP) and designed to block malicious actors from corrupting drivers and software running in the Windows kernel. "For example, we’ve seen attackers use signed but vulnerable drivers to attack policy data structures and install a malicious, unsigned driver," Microsoft [URL='https://www.microsoft.com/security/blog/2020/07/08/introducing-kernel-data-protection-a-new-platform-security-technology-for-preventing-data-corruption/']said [/URL]on the Security Kernel Core Team blog. "KDP mitigates such attacks by ensuring that policy data structures cannot be tampered with." Besides adding memory and security protection to Windows 10 devices, KDP also comes with several added benefits, including: • [I][B]Performance improvements[/B] – KDP lessens the burden on attestation components, which would no longer need to periodically verify data variables that have been write-protected[/I] • [I][B]Reliability improvements[/B] – KDP makes it easier to diagnose memory corruption bugs that don’t necessarily represent security vulnerabilities[/I] • [I]Providing an [B]incentive for driver developers and vendors[/B] to improve compatibility with virtualization-based security, improving adoption of these technologies in the ecosystem" [URL unfurl="true"]https://www.bleepingcomputer.com/news/security/microsoft-testing-new-windows-10-kdp-anti-malware-protection/[/URL][/I] [/QUOTE]

Verification