Microsoft Vulnerable Driver Blocklist: Nws yog dab tsi thiab siv nws li cas

Hnub no, tus computer kev ruaj ntseg Nws yog ib qho ntawm cov kev txhawj xeeb tseem ceeb ntawm txhua tus neeg siv lossis tus tswj hwm qhov system. Cov kev hem thawj tshiab niaj hnub tshwm sim uas sim ua kom muaj qhov tsis zoo. Qhov ntawd yog qhov twg Microsoft Vulnerable Driver Blocklist o Microsoft Vulnerable Driver Blocklist. Ib tug feature uas tau txais tshwj xeeb qhov tseem ceeb nyob rau hauv niaj hnub versions ntawm Windows.

Thiab ib qho ntawm qhov muag muag tshaj plaws hauv Windows kev ruaj ntseg yog qhov cov tswj hwm lossis tsav tsheb. Qhov me me tab sis tseem ceeb software yog raug rau txhua yam tawm tsam, xws li dreaded BYOVD ("Nqa Koj Tus Kheej Tsav Tsheb"). Hauv tsab xov xwm no, peb yuav piav qhia qhov koj yuav tsum paub txog cov npe thaiv no thiab nws ua haujlwm li cas.

Microsoft Vulnerable Driver Blocklist yog dab tsi?

 

Microsoft Vulnerable Driver Blocklist yog ib kev ruaj ntseg feature ua rau hauv Windows thiab hauv nws cov kev tiv thaiv tseem ceeb, xws li microsoft tiv thaiv. Nws lub hom phiaj yog los tiv thaiv kev thauj khoom thiab tua cov neeg tsav tsheb txaus ntshai hauv kev ua haujlwm. Cov tsav tsheb no, feem ntau yog tsim los ntawm cov neeg thib peb es tsis yog Microsoft nws tus kheej, tuaj yeem muaj qhov tsis txaus ntseeg kev nyab xeeb - lossis txawm tias tsim kev phem - ua rau lawv lub qhov rooj zoo tshaj plaws rau kev tawm tsam siab heev.

Daim ntawv ua haujlwm zoo li no ib hom "black list" nyob rau hauv uas controllers uas ua tau raws li ib los yog ntau tshaj ntawm cov yam ntxwv nram qab no yog incorporated:

• Paub qhov tsis zoo: Cov tsav tsheb uas nws qhov tsis muaj zog tuaj yeem raug siv los ua kom muaj cai nce ntxiv hauv Windows kernel lossis hla kev tiv thaiv.
• tus cwj pwm phem: Cov tsav tsheb uas suav nrog cov lej uas tuaj yeem ua rau muaj kev puas tsuaj, teeb tsa malware, lossis kos npe nrog daim ntawv pov thawj ntsig txog software phem.
• Ua txhaum ntawm Windows kev ruaj ntseg qauv: Cov neeg tsav tsheb uas, yam tsis tas yuav ua phem, tuaj yeem hla kev khiav haujlwm kev txwv kev nyab xeeb.

Hauv luv luv, Microsoft lub blocklist ua raws li ib daim thaiv tiv thaiv uas tiv thaiv cov neeg tsav tsheb uas txaus ntshai los ntawm kev khiav, txawm tias thaum lawv muaj qhov kos npe digital thiab ntawv pov thawj siv tau. Qhov no ntxiv dag zog rau ib qho ntawm cov txheej txheem tseem ceeb tshaj plaws ntawm Windows tiv thaiv, cov ntsiav, thiab cuam tshuam rau kev ua haujlwm ntawm cybercriminals.

Yuav ua li cas lub blocklist ua haujlwm: nws tiv thaiv koj lub computer li cas

La Microsoft Vulnerable Driver Blocklist Nws tsis yog ib qho khoom zoo li qub, tab sis ib tug nyob mechanism uas yog hloov kho tas li. Microsoft, koom tes nrog cov tuam txhab kho vajtse (IHV) thiab OEMs, ua haujlwm saib xyuas tus tsav tsheb ecosystem kom txheeb xyuas thiab thaiv cov khoom uas ua rau muaj kev hem thawj.

Thaum tus neeg tsav tsheb raug txheeb xyuas tias muaj kev phom sij, ua phem, lossis tsis sib haum nrog Windows cov qauv kev nyab xeeb, nws tau ntxiv rau hauv daim ntawv thiab txiav txim siab los ntawm kev thauj khoom ntawm cov khoos phis tawj uas lub blocklist tau ua haujlwm. Qhov no yog ua tiav, nyob ntawm lub version thiab configuration ntawm lub system, nyob rau hauv ntau txoj kev:

• Memory Integrity (HVCI los yog Hypervisor-Protected Code Integrity): Yog tias qhib tau (los ntawm lub neej ntawd ntawm ntau lub Windows 11 PCs tshiab), cov ntawv teev npe yuav siv tau los ntawm kev thaiv cov tsav tsheb suav nrog hauv nws.
• Hom Muaj Kev Nyab Xeeb: Cov khoom siv Windows khiav hauv S hom, uas boasts ib puag ncig tswj ntau thiab ruaj ntseg, kuj muaj cov blocklist enabled los ntawm lub neej ntawd.
• Application Control hauv Windows Defender (App Control for Business): Tso cai rau cov thawj coj siv cov npe pom zoo los ntawm lawv tus kheej txoj cai kev nyab xeeb.
• Windows Security (system app): Txij li Windows 11 22H2, qhov tshwj xeeb tau qhib los ntawm lub neej ntawd thiab tuaj yeem tswj hwm los ntawm Kev Nyab Xeeb Kev Nyab Xeeb> Core Isolation interface.

Cov tsav tsheb twg raws nraim qhov blocklist thaiv?

Tsis yog txhua tus tsav tsheb yuav raug rau hauv daim ntawv teev npe, tsuas yog cov uas ua tau raws li qee lub hom phiaj uas ua rau lawv muaj peev xwm txaus ntshai. Ntawm cov laj thawj feem ntau yog vim li cas tus tsav tsheb ntxiv rau hauv daim ntawv teev npe no yog:

• Muaj kev ruaj ntseg vulnerabilities paub thiab sau tseg.
• Nws siv tau raug kuaj pom hauv kev tawm tsam, suav nrog kev siv los ntawm ransomware, malware, lossis kev hem thawj tsis tu ncua.
• Kev siv daim ntawv pov thawj muaj feem xyuam rau cov phiaj xwm phem rau koj qhov kos npe digital.
• Tus cwj pwm uas tso cai rau kev hla dhau ntawm Windows kev ruaj ntseg qauv, txawm hais tias nws tsis yog classic malware.

Lwm cov npe uas yuav muaj nyob rau hauv daim ntawv teev npe suav nrog cov tsav tsheb qub rau cov khoom siv hluav taws xob, cov kev tswj hwm kho vajtse siab heev, software virtualization, lossis txawm tias tsav tsheb rau qee yam khoom siv peripheral uas nws muaj kev ruaj ntseg raug cuam tshuam.

Blocklist hloov tshiab thiab txhawb nqa

Ib qho ntawm lub zog loj ntawm Microsoft Vulnerable Driver Blocklist yog qhov ntawd Nws yog ib daim ntawv teev npe nyob thiab khaws cia raws sij hawm. Microsoft hloov kho nws nrog txhua qhov tshiab loj ntawm Windows (feem ntau ib zaug lossis ob zaug hauv ib xyoos nrog cov hloov tshiab loj). Tsis tas li ntawd, koj tuaj yeem tso tawm thaj ua rau thaj tshwj xeeb los ntawm Windows Update lossis raws li phau ntawv rub tawm thaum muaj kev hem thawj tshiab.

Txawm hais tias lub blocklist muab kev tiv thaiv siab heev, Nws qhov kev ua kom muaj peev xwm muaj qee yam kev mob tshwm sim ntawm kev kho vajtse lossis software compatibility thiab kev ua haujlwm. Piv txwv li, yog tias tus tsav tsheb tseem ceeb rau ib lub cuab yeej tshwj xeeb raug thaiv, nws yuav tsum tsis ua haujlwm zoo thiab, qee zaus, txawm tias ua rau lub vijtsam xiav ntawm kev tuag (BSOD).

Yog li ntawd, Microsoft pom zoo ua ntej siv txoj cai tswjfwm hauv hom kev tshuaj xyuas, tshuaj xyuas cov xwm txheej thaiv ua ntej yuam kom muaj kev txwv mus tas li. Hauv kev lag luam ib puag ncig, qhov no yog ua tiav los ntawm App Control thiab cov cai sib xws, tso cai rau koj los saib xyuas cov tsav tsheb twg yuav raug thaiv thiab txiav txim siab raws li qhov xwm txheej.

Raws li txoj cai dav dav, daim ntawv teev npe tau raug kho kom zoo kom txo qis qhov tsis tseeb thiab sib npaug tiv thaiv tawm tsam tej teeb meem compatibility. Txawm li cas los xij, kev tsis sib haum xeeb yuav tshwm sim ntawm cov tshuab nrog cov khoom siv tshwj xeeb lossis cov software qub. Nyob rau hauv tas li ntawd, nws yog ib lub tswv yim zoo los qhia qhov teeb meem los ntawm Microsoft raws yog li peb tuaj yeem sib tham txog kev tshem tawm lossis hloov kho tus tsav tsheb cuam tshuam.

Yuav ua li cas pab tau lossis lov tes taw Microsoft Vulnerable Driver Blocklist

Nyob ntawm qhov version ntawm Windows thiab ntaus ntawv, Lub blocklist tuaj yeem qhib lossis kaw los ntawm lub neej ntawd. Txij li thaum tso tawm Windows 11 version 22H2, cov yam ntxwv tau qhib rau txhua lub cuab yeej, tab sis nws tseem tuaj yeem tswj hwm manually.

Muaj ntau Ob txoj hauv kev loj rau kev tswj hwm lub xeev ntawm blocklist:

• Los ntawm Windows Security interface:
  • Qhib Windows Security app (nrhiav hauv Start menu).
  • Mus rau ntu "Device Security" thiab tom qab ntawd mus rau "Core Isolation."
  • Ntawm qhov screen ntawd, qhib lossis kaw qhov "Microsoft Vulnerable Driver Blocklist" xaiv raws li qhov tsim nyog.
  • Hauv cov ntawv qub (Windows 10 lossis 11 21H2), qhov kev xaiv yuav tsis tshwm sim lossis yuav xav kom koj qhib HVCI ua ntej.
• Siv Windows Registry:
  • Qhib lub npe editor (regedit.exe).
  • Mus rau HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Config.
  • Kho lossis tsim DWORD tus nqi “VulnerableDriverBlocklist”, muab nws 1 los pab kom muaj qhov tshwj xeeb, lossis 0 kom lov tes taw nws.

Tom qab qhov kev hloov pauv, nws raug nquahu kom rov pib dua koj lub khoos phis tawj kom cov chaw siv tau.

Cov lus pom zoo rau cov neeg siv thiab cov tuam txhab

Txhawm rau kom tau txais txiaj ntsig zoo tshaj plaws los ntawm kev tiv thaiv los ntawm Microsoft Vulnerable Driver Blocklist, ob tus neeg siv hauv tsev thiab cov thawj tswj hwm yuav tsum ua raws li ob peb kauj ruam yooj yim: kev coj zoo:

• Nco ntsoov khaws lub operating system kom hloov tshiab, raws li cov tshiab versions feem ntau suav nrog kev txhim kho tseem ceeb rau lub blocklist thiab Windows kernel tiv thaiv.
• Saib xyuas ib ntus yog tias daim ntawv teev npe tsis ua haujlwm los ntawm Windows Security daim ntawv thov (tshwj xeeb tshaj yog tom qab kev hloov kho tshiab lossis hloov chaw).
• Hauv kev lag luam ib puag ncig, xa App Control rau Kev Lag Luam cov cai los xyuas kom meej tias tag nrho cov khoom siv tau txais qhov tseeb version ntawm daim ntawv teev npe thiab saib xyuas cov teeb meem muaj peev xwm ua ntej siv cov blocks mus tas li.
• Siv tau cov cai hauv kev tshuaj xyuas ua ntej, txhawm rau txo qis kev sib raug zoo tsis sib haum xeeb thiab daws qhov tsis tseeb qhov zoo.
• Nyob twj ywm rau Microsoft cov ntawv xov xwm kev ruaj ntseg thiab cov chaw tsim khoom kho vajtse kom kawm txog cov tsav tsheb tshiab uas cuam tshuam tau.
• Xa cov tsav tsheb tsis txaus ntseeg rau Microsoft Siv cov cuab yeej raug cai thiab portals, pab txhawb kev txhim kho txuas ntxiv ntawm kev tiv thaiv thoob ntiaj teb.

Kev tswj hwm qib siab ntawm Microsoft Vulnerable Driver Blocklist: rub tawm thiab siv phau ntawv thov

Rau cov neeg siv siab thiab kev lag luam, Microsoft muaj peev xwm ua tau Download tau qhov tseeb version ntawm daim ntawv teev npe hauv binary lossis XML los ntawm koj lub vev xaib rub tawm. Qhov no yog qhov tseem ceeb hauv cov xwm txheej uas yuav tsum muaj kev tswj hwm siab tshaj plaws lossis thaum twg, vim li cas kev nyab xeeb lossis kev ua raws, koj tsis xav tso siab rau kev hloov kho tsis siv neeg nkaus xwb.

Cov txheej txheem ib txwm muaj raws li hauv qab no:

1. Download tau Txoj Cai Hloov Kho Cov Cuab Yeej Kev Tswj Xyuas App.
2. Tau txais thiab rho tawm cov Vulnerable Driver Blocklist binaries.
3. Xaiv cov ntaub ntawv tsim nyog (kev tshuaj xyuas lossis siv version) thiab hloov npe rau SiPolicy.p7b.
4. Luam SiPolicy.p7b mus rau qhov chaw %windir%\system32\CodeIntegrity.
5. Khiav lub cuab yeej hloov tshiab kom qhib thiab hloov kho txhua txoj cai tswj hwm App.

Tom qab rov pib lub khoos phis tawj, koj tuaj yeem txheeb xyuas tau tias txoj cai raug siv raug los ntawm kev tshuaj xyuas cov xwm txheej 3099 hauv Windows Event Viewer, hauv qab CodeIntegrity log.

Kev cuam tshuam rau cov neeg siv kev paub thiab paub txog teeb meem

Txawm tias muaj qhov zoo, tsis yog txhua yam yog ci. Kev tswj hwm Blocklist tuaj yeem ua rau qee qhov tsis yooj yim rau cov neeg siv kawg, tshwj xeeb tshaj yog nyob rau hauv cov tshuab nrog cov kev xav tau tshwj xeeb. Feem ntau cov teeb meem feem ntau muaj xws li:

• Incompatibility nrog cov laus hardware los yog legacy cov kev pab cuam nws txoj kev loj hlob tau tso tseg thiab nws cov tsav tsheb tsis tau hloov kho kom tau raws li cov qauv kev nyab xeeb tshiab.
• Muaj peev xwm cuav zoo uas thaiv zoo kawg nkaus raug cai, tab sis txawv txawv, tsav tsheb, uas tuaj yeem ua rau cov khoom siv tsis tau.
• Blue Screen of Death (BSOD) Cases yog hais tias ib qho tseem ceeb khau raj yog thaiv los ntawm yuam kev.

Vim li cas lub blocklist tseem ceeb niaj hnub no

BYOVD kev tawm tsam, kev siv cov tsav tsheb tsis nco qab thiab kev ua kom zoo ntawm malware ua rau nws kev tiv thaiv ntawm lub hauv paus system tseem ceeb dua puas tau. Cybercriminals tau ua pov thawj tias lawv tuaj yeem siv tau txhua qhov kev tsis sib haum xeeb, thiab cov neeg tsav tsheb tsis zoo sawv cev rau ib qho ntawm qhov txaus ntshai tshaj plaws backdoors, ua haujlwm nyob rau theem qis uas lawv tuaj yeem lov tes taw lossis tswj hwm txhua yam kev ntsuas kev nyab xeeb.

Microsoft lub tswv yim ntawm kev tswj hwm lub hauv paus, dynamic blocklist txuas nrog cov neeg muag khoom thiab cov zej zog kev nyab xeeb yog qhov zoo tshaj plaws teb rau kev hem thawj uas cuam tshuam rau ob tus neeg siv thiab cov koom haum loj.

Ua kom Microsoft Vulnerable Driver Blocklist ua haujlwm thiab hloov tshiab yog ib txoj hauv kev yooj yim tshaj plaws thiab ua tau zoo tshaj plaws los txhawb Windows kev ruaj ntseg thiab ua rau nws nyuaj rau cybercriminals. Nws raug pom zoo tias cov thawj coj siv nws nrog rau lwm cov cai tiv thaiv thiab cov neeg siv hauv tsev ib ntus tshuaj xyuas cov chaw hauv Windows Security; Qhov no ua rau kom muaj kev tiv thaiv thiab kev thaj yeeb ntawm lub siab ntawm koj cov ntaub ntawv thiab qhov system.