The very serious CrowdStrike incident has once again highlighted concerns about the security of Windows, an operating system that runs hundreds of millions of machines and needs to be strengthened. One of the ideas that Microsoft uses to improve it is remove security software from the Windows kernel.

Last week, Microsoft held a summit where its most important partners gathered to respond to a CrowdStrike incident and prevent a repeat of such a disaster. In particular, security vendors, government officials and regulators in the United States and Europe. Although no formal decisions were taken, the meeting resulted in agreement on several key points that will require further development in the future.

In addition to promising support for maintaining a range of security software offerings (beyond Microsoft’s proprietary solutions), the company explained how it manages security using secure deployment practices and expressed a willingness to share data, tools and “documented processes” with the community.

The company explained its approach gradual and phased rollout of updateswhich improves the resiliency of Windows and allows you to pause or roll back faulty versions if necessary. We expect greater investment in compliance as failed client-level updates continue to be an unsolved pain point in Windows.

Windows security outside of kernel mode

Microsoft aims to lay the groundwork for creating long-term solutions that address Windows security issues. In conversations with her partners, they talked about “new platform options” and it excels there Move security software out of Windows kernel mode. We talked about the potential restriction of access to the Windows kernel in July when the CrowdStrike incident occurred.

Here we would go further with the idea of ​​safety design, which, as it may seem, is not new. Our senior readers remember this Microsoft tried this in Windows Vistaan underrated version that contained news as important as this, but had to give up due to considerable resistance from security software vendors and regulators. Now it seems that vendors are more open to what Microsoft has to offer. “Our customers and ecosystem partners have asked Microsoft to provide additional security options outside of kernel mode”explains the company.

Microsoft says it is developing a new platform that addresses needs expressed by security vendors, including better performance, tamper protection and more. Major changes in the near future that will strengthen Windows security and prevent another CrowdStrike-like disaster.