Enhance Windows 7 security

Discover essential new security features, ways you can build upon Windows 7 security, and how to prepare for a secure migration.

What's new in Windows 7?

With the launch of its new operating system, Microsoft fixes a number of security issues that troubled Vista. The improved security built into Windows 7 demonstrates that Microsoft listened to its critics.

Stop more threats

In Windows 7, Address Space Layout Randomization (ASLR) randomizes the locations in your computer memory where system libraries are loaded. When combined with Data Execute Prevention (DEP)-which prevents code from executing in areas of memory intended for data storage-ASLR makes it more difficult for malware to take advantage of security vulnerabilities in your browser, plug-ins and applications.

Protect your data

Windows 7 provides more granular USB port controls through the deployment of Group Policy Objects (GPOs) that can help you protect sensitive data. Windows 7 also introduces BitLocker To Go, which enables encryption to be deployed to removable disk drives like USB memory sticks and portable hard disks.

Manage user privileges

With the introduction of User Account Control (UAC), Windows 7 better secures desktops from drive-by malware attacks taking advantage of users' Administrative rights. UAC also simplifies the process for administrators to authorize behaviors that they know to be safe.

Enhance Windows 7 security

To ensure your company is completely protected, you may want to use a Host Intrusion Prevention System (HIPS) that can watch the behavior of your applications as they run concurrently with standard Windows 7 features. This enhances your protection against zero-day malware by looking for behaviors that are malicious before a signature has ever been written.

Before implementing Windows 7, you should review your endpoint and data protection strategies to ensure your business has the best protection.

Plan for migration

Windows 7 supports Sophos Anti-Virus version 9 and above. But before you deploy it on Windows 7 computers, there are several configurations to check, including network settings, remote registry, UAC and firewall.

source : http://www.sophos.com/security/topic/windows7-secure-migration.html