The Latest in Windows Security for Developers
summary
Twelve concrete Windows security features land for developers: passkeys with FIDO replaces passwords using a cryptographic key pair and Windows Hello (citing growth from ~115 to >4,000 password attacks/sec), VBS key protection isolates keys in a VBS runtime and binds them to TPM with negligible perf impact (encrypt API gets a VBS flag), PDE Level 1/Level 2 encrypts app data until first unlock or whenever PC is locked, and Win32 app isolation creates brokered least-privilege boundaries; plus attestation, VBS enclaves, Zero-Trust DNS preview, MSIX, Trusted Signing, Smart App Control, and admin token separation.
AI-written summary · about
chapters (12)
- 0:00Introduction to security
- 1:36Identity and passkeys
- 3:20VBS key protection
- 4:19Modernizing authentication
- 5:19Personal data encryption
- 7:29VBS enclaves
- 8:34Remote device attestation
- 9:44Zero trust DNS
- 11:11Win32 app isolation
- 12:41Admin and user token security
- 14:14Privacy and MSIX packaging
- 15:03Trusted signing and wrap-up
related talks
25mPasskeys on Windows: New Platform Features
27mPasskeys on Windows: Paving the Way to a Frictionless Future!
44mWindows Phone App Security For Builders And Breakers
25mBringing Passkeys into your Passwordless Journey
51mAnalysis of the Attack Surface of Windows 10 Virtualization-Based Security
44mModernize your Win32 application for security and privacy Q&A
19mThe toplist of securing your developer workstation
19mKeynote: Attested, Transparent, Sovereign: The Evolution of Confidential Computing