Microsoft Vulnerable Driver Blocklist: Chii uye mashandisirwo ayo

Nhasi, iyo computer security Ndiyo imwe yezvakakosha zvinonetsa kune chero mushandisi kana system maneja. Kutyisidzira kutsva kunogara kuchibuda kunoedza kushandisa kusasimba. Ndipo pane Microsoft Vulnerable Driver Blocklist o Microsoft Vulnerable Driver Blocklist. Chinhu chakawana kukosha kwakakosha mushanduro dzemazuva ano dzeWindows.

Uye imwe yenzvimbo dzakatetepa muWindows kuchengetedza ndeye vatongi kana vatyairi. Iyo diki asi yakakosha software inobatwa nemhando dzese dze kurwisa, sevanotyiwa BYOVD ("Unza Wako Mutyairi Ari Munjodzi"). Muchinyorwa chino, tichatsanangura zvaunoda kuziva nezve iyi block list uye kuti inoshanda sei.

Chii chinonzi Microsoft Vulnerable Driver Blocklist?

 

Microsoft Vulnerable Driver Blocklist ndeye kuchengetedza chimiro chakavakirwa muWindows uye mumhinduro dzayo huru dzekudzivirira, senge Microsoft defender. Chinangwa chayo ndechekudzivirira kurodha uye kuurayiwa kwevatyairi vane njodzi muhurongwa hwekushandisa. Aya madhiraivha, anowanzo kugadzirwa nevechitatu mapato kwete Microsoft pachayo, anogona kuve nezvikanganiso zvekuchengetedza-kana kunyange kugadzirwa zvine hutsinye-achivaita iwo akanakisa magedhi ekurwiswa kwepamberi.

Rondedzero yacho inoshanda seizvi rudzi rwe "black list" umo ma controller anosangana nechimwe kana anopfuura eanotevera maitiro anosanganisirwa:

• Kuzivikanwa kusasimba: Vatyairi vane hutera hunogona kushandiswa kuwedzera ropafadzo muWindows kernel kana kudzivirira kudzivirira.
• Hunhu hwakaipa: Vatyairi vanosanganisira kodhi inogona kukuvadza, kuisa malware, kana kusainwa nezvitupa zvine chekuita nesoftware yakaipa.
• Kutyora kweWindows kuchengetedza modhi: Vatyairi avo, pasina hazvo kuve vane hutsinye, vanogona kunzvenga zvirango zvekuchengetedza sisitimu yekushandisa.

Muchidimbu, Microsoft's blocklist inoita se nhovo inodzivirira inodzivirira vatyairi vanogona kuve nengozi kumhanya, kunyangwe ivo vaine siginecha yedhijitari uye chitupa chinoshanda. Izvi zvinosimbisa imwe yeakaomesesa akaturikidzana ekudzivirira kweWindows, iyo kernel, uye zvakanyanya kuomesa basa rematsotsi.

Iyo blocklist inoshanda sei: inodzivirira sei komputa yako

La Microsoft Vulnerable Driver Blocklist Haisi chinhu chakamira, asi nzira yekurarama inogara ichivandudzwa. Microsoft, yakabatana nevagadziri vehardware (IHV) uye maOEM, inotarisisa mutyairi ecosystem kuona uye kuvhara zvinhu zvinotyisidzira.

Kana mutyairi akaonekwa ari panjodzi, ane hutsinye, kana asingaenderane neWindows kuchengetedza zviyero, inowedzerwa kune iyo rondedzero uye inovharwa otomatiki kurodha pamakomputa uko blocklist inoshanda. Izvi zvinoitwa, zvichienderana neshanduro uye kumisikidzwa kweiyo system, munzira dzakawanda:

• Memory Kutendeseka (HVCI kana Hypervisor-Yakachengetedzwa Code Kutendeseka): Kana ikagoneswa (nekusarudzika pane zvakawanda zvitsva Windows 11 PCs), iyo blocklist inobata nekuvharira vatyairi vanosanganisirwa mairi.
• Nzira Yakachengeteka: Windows zvishandiso zvinomhanya muS modhi, iyo inozvirumbidza inodzorwa uye yakachengeteka nharaunda, zvakare ine iyo blocklist inogoneswa nekusarudzika.
• Kudzora Kwekushandisa muWindows Defender (App Control yeBhizinesi): Inobvumira vatariri kushandisa iyo yakakurudzirwa runyorwa kuburikidza neavo ekuchengetedza marongero.
• Windows Security (system app): Kubva Windows 11 22H2, chimiro chinogoneswa nekusarudzika uye chinogona kudzorwa kubva kuDhidhiyo Chengetedzo> Core Isolation interface.

Ndeapi madhiraivha anovharisa iro blocklist?

Havasi vese vatyairi vari pasi peiyo blocklist, avo chete izvo zvinozadzisa zvimwe zvinangwa zvinovaita njodzi dzinogona kuitika. Pakati pezvikonzero zvinowanzoitika nei mutyairi achiwedzerwa kune iyi rondedzero ndezvi:

• Kuvapo kwekusagadzikana kwekuchengetedza anozivikanwa uye akanyorwa.
• Kushandiswa kwayo kwakaonekwa mukurwiswa kunoshanda, kusanganisira kubiridzira neransomware, malware, kana kutyisidzira kunoramba kuchienderera mberi.
• Kushandiswa kwezvitupa zvine chekuita nekurwisa kwakashata yedhijitari siginicha yako.
• Maitiro anobvumira kudarika kweWindows kuchengetedza modhi, kunyangwe isiri yekare malware.

Mamwe mazita anogona kunge ari pane rondedzero anosanganisira vatyairi vekare vedhisiki zvinoshandiswa, advanced hardware management zvirongwa, virtualization software, kana kunyange vatyairi vemamwe madhivhari emidziyo ane chengetedzo yakakanganiswa.

Blocklist Update uye Tsigiro

Rimwe remasimba makuru eMicrosoft Vulnerable Driver Blocklist nderekuti Iro rondedzero mhenyu uye inochengetwa nekufamba kwenguva. Microsoft inoivandudza neimwe vhezheni hombe yeWindows (kazhinji kamwe kana kaviri pagore nehukuru hwekuvandudza). Pamusoro pezvo, iwe unogona kusunungura chaiwo zvigamba kuburikidza neWindows Kwidziridzo kana sebhuku rekurodha kana paine kutyisidzira kutsva.

Kunyangwe iyo blocklist inopa yakanyanya nhanho yekudzivirira, Kuita kwayo kunogona kuve nemhedzisiro pahardware kana software kuenderana uye kushanda. Semuenzaniso, kana mutyairi akakosha weimwe mudziyo akavharwa, anogona kumira kushanda nemazvo uye, muzviitiko zvisingawanzo, kunyange kukonzera yebhuruu skrini yerufu (BSOD).

Naizvozvo, Microsoft inokurudzira kutanga wasimbisa mutemo muodhita modhi, kuongorora kuvharidzira zviitiko usati wamanikidza block zvachose. Munzvimbo dzemabhizinesi, izvi zvinoitwa kuburikidza neApp Control uye mutemo unoenderana, zvichikubvumidza kuti utarise kuti ndevapi vatyairi vangavharirwa uye kuita sarudzo pane imwe nyaya-ne-nyaya.

Sezvo mutemo wakazara, iyo blocklist inonatswa zvakakwana kuti ideredze manyepo enhema uye kuchengetedzwa kwechiyero kubva kune zvinogona kuenderana nyaya. Nekudaro, kusawirirana kusingatarisirwe kunogona kuitika pane masisitimu ane chaiwo hardware kana yekare software. Kana zvakadaro, ipfungwa yakanaka kuudza nyaya kuburikidza neMicrosoft chiteshi kuti tigone kukurukura kubvisa kana kugadzirisa mutyairi abatwa.

Maitiro ekugonesa kana kudzima iyo Microsoft Vulnerable Driver Blocklist

Zvichienderana neshanduro yeWindows uye zvigadziriso zvemudziyo, Iyo blocklist inogona kugoneswa kana kuvharwa neiyo default. Kubva pakaburitswa Windows 11 vhezheni 22H2, ficha yakagoneswa pamidziyo yese, asi inogona kubatwa nemaoko.

Pane Nzira mbiri huru dzekudzora mamiriro eiyo blocklist:

• Kubva kuWindows Security interface:
  • Vhura iyo Windows Security app (tsvaga muKutanga menyu).
  • Enda kuchikamu che "Device Security" uye wozoenda ku "Core Isolation."
  • Pane iyo skrini, gonesa kana kudzima iyo "Microsoft Vulnerable Driver Blocklist" sarudzo sezvakakodzera.
  • Mune shanduro dzekare (Windows 10 kana 11 21H2), sarudzo inogona kusaoneka kana kuti ingada kuti iwe ugone kugonesa HVCI kutanga.
• Kushandisa Windows Registry:
  • Vhura iyo registry editor (regedit.exe).
  • Enda kune HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Config.
  • Rongedza kana gadzira iyo DWORD kukosha "VulnerableDriverBlocklist", uchiigovera iyo 1 kuti igonese chimiro, kana 0 kuidzima.

Mushure mekuchinja, zvinokurudzirwa kutangazve komputa yako kuti zvigadziriso zvishande.

Zvinokurudzira vashandisi nemakambani

Kuti uwane zvakanyanya kubva padziviriro yakapihwa neMicrosoft Vulnerable Driver Blocklist, vese vashandisi vemba uye masystem maneja vanofanirwa kutevedzera mashoma akapusa: maitiro akanaka:

• Nguva dzose chengetedza sisitimu yekushandisa zvizere, sezvo shanduro itsva dzinowanzobatanidza kuvandudzwa kwakakosha kune blocklist uye Windows kernel kuchengetedza.
• Nguva nenguva tarisa kana iyo blocklist iri kushanda kubva kuWindows Security application (kunyanya mushure mekugadzirisa masystem kana shanduko yekuchinja).
• Munzvimbo dzemabhizinesi, shandisa App Control yeBhizinesi marongero kuve nechokwadi chekuti zvishandiso zvese zvinogara nhaka yazvino vhezheni yerondedzero uye yekutarisa kune zvingangoitika nyaya usati waita zvidhinha zvisingaperi.
• Gadzirisa mitemo mune yekuongorora mode kutanga, kuderedza kugarisana kukakavara uye kugadzirisa zvingangoitika zvenhema.
• Ramba wakatarisa Microsoft chengetedzo bulletins uye mugadziri wehardware kuti adzidze nezve vangangoita vatyairi vatsva vakakanganisika.
• Tumira madhiraivha anofungidzirwa kuMicrosoft Kushandisa maturusi epamutemo uye maportals, zvichibatsira mukuenderera mberi kwekuvandudzwa kwedziviriro yepasirese.

Yepamberi manejimendi yeMicrosoft Vulnerable Driver Blocklist: dhawunirodha uye bhuku rekushandisa

Kune vashandisi vepamberi nemabhizinesi, Microsoft inopa kugona Dhawunirodha yazvino vhezheni ye blocklist mune bhinari kana XML fomati kubva yako yekurodha portal. Izvi zvinobatsira mumamiriro ezvinhu apo kutonga kwakanyanya kunodiwa kana kana, nekuda kwekuchengetedza kana zvikonzero zvekuteerera, haudi kuvimba chete neotomatiki zvigadziriso.

Iyo yakajairika maitiro ndeyekutevera:

1. Dhaunirodha Chishandiso cheKugadziridza Mapurisa Kudzora App.
2. Tora uye bvisa iyo Vulnerable Driver Blocklist mabhinari.
3. Sarudza faira rakakodzera (odhiti kana shanduro yakashandiswa) uye uipe zita rekuti SiPolicy.p7b.
4. Kopa SiPolicy.p7b kune % windir%\system32\CodeIntegrity nzvimbo.
5. Mhanya chishandiso chekuvandudza kuti uvhure uye uvandudze mitemo yese yeApp Control.

Mushure mekutangazve komputa, unogona kuona kuti mutemo wakaitwa nemazvo nekuongorora zviitiko zve3099 muWindows Chiitiko Viewer, pasi peCodeIntegrity log.

Impact pane ruzivo rwemushandisi uye zvinozivikanwa nyaya

Pasinei nezvakanakira, hazvisi zvinhu zvose zvakajeka. Blocklist manejimendi inogona kukonzera kumwe kusagadzikana kune yekupedzisira mushandisi, kunyanya mumasisitimu ane zvakanyanya customized zvinodiwa. Matambudziko anowanzo sanganisira:

• Kusawirirana neyekare Hardware kana legacy zvirongwa budiriro yavo yakamira uye vatyairi vasina kuvandudzwa kuti vasangane nemipimo mitsva yekuchengetedza.
• Zvinogoneka zvenhema izvo zvinovharira zviri pamutemo, asi zvisina kujairika, vatyairi, izvo zvinogona kuita kuti michina isashande.
• Blue Screen of Death (BSOD) Nyaya kana chinhu chakakosha chebhutsu chakavharwa nekukanganisa.

Nei iyo blocklist yakakosha nhasi

BYOVD kurwiswa, kushandiswa kwevatyairi vakakanganwa uye kurongeka kwemarware kunoita kuti zvidaro. kuchengetedzwa kweiyo system core yakakosha kupfuura kare. MaCybercriminals aratidza kuti vanogona kushandisa chero loophole, uye vatyairi vari munjodzi vanomiririra imwe yenjodzi yekumashure, inoshanda padanho rakaderera zvekuti vanogona kudzima kana kushandisa chero imwe nzira yekuchengetedza.

Zano reMicrosoft rekuchengetedza yepakati, ine simba blocklist yakabatana nevatengesi uye nharaunda yekuchengetedza ndeye mhinduro yakanaka kune kutyisidzira kunobata vese vashandisi vega uye masangano makuru.

Kuchengeta Microsoft Vulnerable Driver Blocklist inoshanda uye yazvino ndiyo imwe yedzakareruka uye inoshanda nzira yekusimbisa Windows kuchengetedza uye kuita kuti zviomere matsotsi. Zvinokurudzirwa kuti vatungamiri vashandise pamwe chete nemamwe mitemo yekudzivirira uye kuti vashandi vepamba nguva nenguva vanoongorora zvirongwa muWindows Security; Izvi zvakanyanya kuwedzera dziviriro uye rugare rwepfungwa zve data rako uye system.