Windows 10 – Security Piet Carpentier Senior IT Consultant Xylos
About me Piet Carpentier Piet.carpentier@xylos.com @dfter https://be.linkedin.com/in/pcarpentier Windows Client Consultant
Agenda Intro Windows 10: which security tools does it offer Device Security Windows Hello Demo: Credential Guard Demo: Device Guard Demo: Windows ATP Windows 7: not ready for modern threats Tips from the field What can Xylos do for you! Q&A
Layered Defence – Defence in Depth Network Firewall w AV Scanning Edge Microsoft SmartScreen Endpoint FW Endpoint AV # Layers > $ attacker PC
Windows 10: Defence Stack Device Identity Information Threat Security Protection Protection Resistance UEFI Secure Boot Windows Defender and SmartScreen BitLocker Windows Defender Trusted Boot with ELAM Device Guard Windows Information Microsoft Edge Code Integrity Credential Guard Virtualization based Security Protection SmartScreen Windows Defender Application Guard Health Attestation Device Encryption App Locker Windows Hello TPM … … ... … Windows Defender ATP
Positioning Device Guard UMCI AppLocker Platform Secure Boot UEFI Secure Boot KMCI ELAM, AV Windows Windows Driver, and User mode code (apps, Kernel, Boot ROM/Fuses Bootloaders Native UEFI 3 rd Party etc.) Drivers, OS Loader System Files Drivers
Device Guard Requires Kernel Mode User Mode Has a audit / Enterprise, code signing code signing enforce mode Education SKU Virtualization Requires TPM, DMA Based Security UEFI Protection (VBS)
The Problems of passwords today ... Passwords ...
Windows Hello Finger Windows Hello PIN Face IRIS companion Devices Print (WBF) Framework Microsoft Passport
Demo: Credential Guard
Demo: Windows ATP
Windows 7 and 8.1: “ Not ready for modern threats” Windows 7: Extended support DMA attack Mimikatz …
Notes from the field Deploy UEFI Facilitate your devices with TPM chips Move away from Windows 7 and 8.1 Think about implementing code signing into your packaging processes
What can Xylos do for you! Xylos Lifecycle CC : Windows Client : Consultancy, Workshops, Guidance • Contact : David Biot • Email : David.Biot@xylos.com Security guidance • Contact : Johan Celis • Email : Johan.Celis@xylos.com Information security campaign • Contact : Thomas Lauwers • Email: thomaslauwers@neolearning.eu
9 th of March 2017 • Why is a migration to Windows 10 different than previous Windows migrations 16 th of March 2017 • Windows 10 and security: a scenario-based approach 23 rd of March 2017 • Managing Windows 10 from the cloud 30 th of March 2017 • Onboarding your Windows 10 users with Oase www.xylos.com/windows10
If you have more questions or you want more information about our end-to-end solutions with Windows 10 , feel free to contact us! Piet Carpentier - Piet.carpentier@xylos.com David Biot - David.biot@xylos.com
Recommend
More recommend
