Microsoft adds extra layer of security to Windows 10 with Device Guard

Microsoft has unveiled a new security feature for the upcoming Windows 10 called Device Guard. This security layer should prevent software from running that does not have the desired signature. This should reduce malware problems.

The arrival of Device Guard was announced by Microsoft during the RSA Conference currently being held in the US. This Windows 10 functionality can be set so that only software from the Windows Store or from certain suppliers can be run. System administrators can create a list of allowed applications themselves.

To check which software is launched, Device Guard in Windows 10 checks an application’s signature, among other things. Microsoft will provide tools so that companies and organizations can sign their own software.

According to Microsoft, Device Guard does not only look at a signature; the security layer will also make use of virtualization and hardware features, but Microsoft won’t provide details on that. Several major computer manufacturers are said to support Device Guard hardware, including Acer, Fujitsu, HP, Lenovo and Toshiba.

Device Guard can prevent many malware problems, according to Microsoft. However, virus scanners are still necessary, among other things to be able to check macros and just-in-time applications, for example written in Java.