Windows Defender is no longer "Basic Protection"

Status
Not open for further replies.

Ink

Administrator
Thread author
Verified
Staff Member
Well-known
Jan 8, 2011
22,361
Source: Microsoft Brags About Its Antivirus, Shows It’s More Advanced than You Think

"The Windows Defender team worked mostly on this in the last couple of years, and the Windows antivirus can now provide one of the most advanced detection engines on the market. Approximately 97 percent of the malware is detected locally by the client, while the rest of 3 percent can be blocked with machine learning and a mix of features that involve a cloud protection system.

“Heuristic detections, behavioral analysis, and client-based machine learning models work together to identify these potential threats and send them to the cloud protection system for its high-power computational capability. Our most intensive machine learning models live in our cloud protection system. These models can apply enormous computing power to machine learning models that could never run efficiently on the client. We have quick, linear models, of course, in addition to more intensive models like Deep Neural Networks,” Microsoft explains.

The software giant goes on to explain that Windows Defender uses not only a traditional defense system to detect and remove threat but also machine learning working in the cloud and more advanced features that are bundled with the operating system, like application isolation, control, and exploit mitigation.

Windows Device Guard, for instance, locks down the system to run only trusted apps, while Windows Application Guard isolates threats to a single container, blocking it from infecting files stored on the PC.

These are all features that are integrated into the Windows 10 Creators Update, which is currently available for everyone running Windows 10 already. Windows Defender is getting regular updates, and new advanced security features are likely to be added in the Redstone 3 update due in September."

Request Download: Microsoft

What do the Experts and Malware Hub participants think? How does this change for Home users, share your thoughts?
 

Parsh

Level 25
Verified
Honorary Member
Top Poster
Malware Hunter
Well-known
Dec 27, 2016
1,480
The mix of traditional AV, cloud based scanning integrated with ML models and now also the Neural Network learning (this one is very helpful in detecting even newer malware patterns) is already looking promising from Microsoft's side.
However, I wonder how Advanced Threat Protection, their paid protection+mitigation tool for enterprises, will be received.

I've seen during testing (of MH samples) that retesting a malware pack by WD after only a few hours yields a considerably improved detection, indicating that most non-zero-day threats should be well covered by it. The old image may need to be changed for good.
One notable issue is the increasing number of targeted attacks on the WD defense system, like the malware blocking WD's connection to the cloud using Window's own FW!
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top