Microsoft plans to introduce new security features to avoid another CrowdStrike incident

Microsoft

Earlier this year, millions of Windows PCs were dealt with a blue screen of death. The incident sparked by security service provider Crowdstrike’s update raised questions about Microsoft Windows’ defences against global outages. At a recent security summit hosted by Microsoft, the tech giant has promised to improve security features of Windows.

David Weston, Vice President Enterprise and OS Security, Microsoft said that Microsoft and partners discussed the requirements and key challenges in creating a new platform which can meet the needs of security vendors. “Both our customers and ecosystem partners have called on Microsoft to provide additional security capabilities outside of kernel mode which, along with safe deployment practices, can be used to create highly available security solutions,” said Weston.

There have been concerns about the performance limitations and security challenges faced by anti-malware vendors operating outside of kernel mode. Weston said that they have emphasised the need for robust anti-tampering measures to protect security products and highlighted the importance of advanced security sensor capabilities.

“We’re competitors, we’re not adversaries. The adversaries are the ones we need to protect the world from. We are grateful for the support and input from this community and excited about the conversations in progress and work we have ahead,” Weston noted.

What would help Windows PCs is if Microsoft decides to close off access to Windows kernel. With the new platform Microsoft has spoken about, it would easier to do so since it is being build from ground up. This would restrict vendors like Crowdstrike and others from the kernel.

It remains to be seen whether other vendors would agree to that. “As a long-time Microsoft Virus Initiative (MVI) Partner, Broadcom recognises that working closely with Microsoft and other security vendors not only helps improve our customers’ security posture, including endpoint protection, but also the greater global digital ecosystem,” said Adam Bromwich, CTO and Head of R&D, Enterprise Security Group, Broadcom.