Microsoft today, announced that the latest Windows 10 build, contains new security features built with anti-ransomware capability.Asides from the operating systems mode of file protection through ownership and permissions, Microsoft by reason of the rise of ransomware has improved on this long standing file protection mode to reduce threats to data.
The software giant pointed out that the risk with ransomware is closely related to another person being able to change your file permission, hence locking you out.
Ransomware is a type of malicious software that blocks access to the victim's data and threatens to publish or delete it until a ransom is paid. Simple ransomware may lock the system in a way which is not difficult for a knowledgeable person to reverse, while advanced malware encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them.
Microsoft, in this recent addition known as "Controlled folder access," has attempted to fix this as part of updated Windows Defender. With this new build, the concept of whitelisting comes into play.
Files or Folders designated as protected can only be accessed by trusted whitelisted applications. Therefore, in theory, any attempt to access a Protected folder will be blocked by Defender. Concerns about operation overheads were raised by users. Thus, Microsoft has not outrightly stated which applications would be whitelisted, but it is believed applications from the Store would be automatically whitelisted.
By standard, this should hinder the capacity of ransomware to encrypt user data. In application, user expectations are highly placed on Controlled folder access.
