Lesson 6

Protection and Security

At the end of the lesson, the students are able to:
1. understand why Protection and Security is very important in
Operating System;

Introduction

Operating systems manage both logical and physical resources to prevent

interference with each other and unauthorized access from external
sources. Computing resources, such as CPUs, disks, and memory, are
secured and protected by this management. This can be accomplished by
assuring the operating system’s confidentiality, availability,
and integrity. Unauthorized access, viruses, worms, and other threats
must be prevented from entering the system. These methods are categorized
as protection and security in the operating system.

What is Protection and Security in Operating Systems?

OS uses two sets of techniques to counter threats to our systems data

and information:

• Protection
• Security

Protection

Protection tackles the system's internal threats. It provides a

mechanism for controlling access to processes, programs, and user
resources.

In simple words, it specifies which files a specific user can access or

view and modify to maintain the proper functioning of the system. It
allows the safe sharing of common physical address space or common
logical address space which means that multiple users can access the
memory due to the physical address space.

Let's take an example for a better understanding, suppose in a small

organization there are four employees p1, p2, p3, p4, and two data
resources r1 and r2.

The various departments frequently exchange information but not

sensitive information between all employees.

The employees p1 and p2 can only access r1 data resource and employees
p3 and p4 can only access r2 resource.

If the employee p1 tries to access the data resource r2, then the employee
p1 is restricted from accessing that resource.

Hence, p1 will not be able to access the r2 resource.

Security
Security tackles the system's external threats. The safety of their
system resources such as saved data, disks, memory, etc. is secured by
the security systems against harmful modifications, unauthorized access,
and inconsistency. It provides a mechanism (encryption and
authentication) to analyze the user before allowing access to the system.
For example:

In the organization data resources are shared with many employees but a
user who does not work for that specific company cannot access the
information.

Security can be achieved by three attributes:

1. confidentiality (prevention of unauthorized resources and

modification)
2. integrity (prevention of all unauthorized users)
3. availability (unauthorized withholding of resources)

Difference between Protection and Security

Protection Security
Protection deals with who has Security gives the system access
access to the system resources. only to authorized users.
Protection tackles the Security tackles the
system's internal threats. system's external threats.
Protection addresses simple More complex queries are addressed
queries. in security.
It specifies which files a
It defines who is permitted to
specific user can access or view
access the system.
and modify.
Encryption and certification
An authorization mechanism is
(authentication) mechanisms are
used in protection.
implemented.
Protection provides a mechanism While security provides a mechanism
for controlling access to to safeguard the system resources
processes, programs, and user and the user resources from all
resources. external users.

Threats to Protection and Security

A program that is malicious in nature and has harmful impacts on a system

is called a threat.

Protection and security in an operating system refer to the measures and

procedures that can ensure the Confidentiality, Integrity, and
Availability (CIA) of operating systems.

The main goal is to protect the OS from various threats, and malicious
software such as trojans, worms, and other viruses, misconfigurations,
and remote intrusions.

Common Threats That Occur in a System

In a system, some common threats include the following:

1. Virus
2. Trojan horse
3. Worm
4. Trap door
 5. Denial of Service

Virus

A computer virus is a form of malware, or malicious software, that

transmits between computers and corrupts software and data. Generally,
viruses are small pieces of code that are embedded in a system. They can
corrupt files, erase data, crash systems, and other things, making them
extremely dangerous. Also, they can expand by replicating themselves.

Trojan Horse

A Trojan Horse Virus is a form of malware that downloads on a computer

by impersonating a trustworthy program. A Trojan horse can get
unauthorized access to a system's login information. A malicious user
may then use them to enter the system.

Worm

A computer worm is a sort of malware whose main purpose is to keep

operating on infected systems while self-replicating and infecting other
computers. By using a system's resources to extreme levels, a worm can
completely destroy it. It has the ability to produce duplicate copies
that occupy all available resources and prevent any other processes from
using them.

Trap Door

A trap door is basically a back door into software that anyone can use
to access any system without having to follow the normal security access
procedures. It may exist in a system without the user's knowledge. As
they're so hard to detect, trap doors need programmers or developers to
thoroughly examine all of the system's components in order to find them.

Denial of Service

A Denial-of-Service (DoS) attack aims to shut down a computer system or

network so that its intended users are unable to access it. These kinds
of attacks prevent authorized users from accessing a system.

Methods to Ensure Protection and Security in Operating System

• Keep a Data Backup: It is a safe option in case of data corruption

due to problems in protection and security, you can always require
it from the Backup.
• Beware of suspicious emails and links: When we visit some malicious
link over the internet, it can cause a serious issue by acquiring
user access.
• Secure Authentication and Authorization: OS should provide secure
authentication and authorization for access to resources and also
users should keep the credentials safe to avoid illegal access to
resources.
• Use Secure Wi-Fi Only: Sometimes using free wifi or insecure wifi
may cause security issues, because attackers can transmit harmful
 programs over the network or record the activity etc, which could
cause a big problem in the worst case.
• Install anti-virus and malware protection: It helps to remove and
avoid viruses and malware from the system.
• Manage access wisely: The access should be provided to apps and
software by thorough analysis because no software can harm our
system until it acquires access. So, we can ensure to provide
suitable access to software and we can always keep an eye on
software to see what resources and access it is using.
• Firewalls Utilities: It enables us to monitor and filter network
traffic. We can use firewalls to ensure that only authorized users
are allowed to access or transfer data.
• Encryption and Decryption Based transfer: The data content must be
transferred according to an encryption algorithm that can only be
reversed with the appropriate decryption key. This process protects
your data from unauthorized access over the internet, also even if
data is stolen it would always remain unreadable.
• Be cautious when sharing personal information: The personal
information and credentials must be shared only with trusted and
safe sources by not doing so attackers can use this information
for their intent which could be harmful to the system's security.

Stay protected with Windows Security in Windows 10 and 11

How to Setup and How to Turn on Windows Security in Windows 10

It’s important to keep your computer safe with windows security. Being
exposed to virtual threats could result in serious consequences such as
identity theft, breach of privacy, and even data loss.

To do this:

Select Start > Settings > Update & Security > Windows Security and then
Virus & threat protection > Manage settings. (In early versions of
Windows 10, select Virus & threat protection > Virus & threat
protection settings.)

Windows 10 OS built-in security features is used to provide Windows

security and secure the computer device against all kinds of attacks.
Understand Windows Security features
Windows Security in Windows 10 and Windows 11 continually scans the
system for malware (malicious software), viruses, and other cyber
and security threats.

In addition to this real-time protection, the system downloads updates

automatically to help keep your device safe and protect it from threats.
Windows Security is your home to manage the tools that protect your
device and our data.

Windows OS Security management tools includes:

1. Virus & threat protection Microsoft defender antivirus - Scans your

device, monitors threats, runs scans, and gets updates to help
detect the latest threats.

2. Account protection allows you access to sign-in options and account

settings, including Windows Hello feature and dynamic lock.

Windows Hello takes personal access to the next level. Using face
recognition and fingerprint technology, you can gain instant access
to your Windows 10 device and enhance your security as well.

3. Firewall & network protection - Manage firewall settings and

monitor what’s happening with your networks and internet
connections.
4. Application & browser control - Update settings for Microsoft
Defender SmartScreen to help protect your device against
potentially dangerous apps, files, sites, and downloads. You'll
have exploit protection and you can customize protection settings
for your devices.
5. Device security - Review built-in windows security options to help
protect your device from attacks by malicious software.
6. Device performance & health - View status info about your device’s
performance health, and keep your device clean and up to date with
the latest version of Windows.
7. Family options - Keep track of family member’s’ online activity
and the devices in your household.

Can’t open a file because Windows 10 detects a virus in the file location?

If you’ve been on the internet for a while now, you probably downloaded
something from a shady website. Maybe you wanted to get an application
for free to try it before committing to a purchase or just clicked on a
misleading link. Whether or not the download is legitimate, Windows 10
may flag it as an infected file.

This error shows up when Windows 10’s built-in antivirus application,

Windows Defender, detects a file as dangerous. The file may contain a
false positive or actual malware.
 Important Windows Security information

The following are some important Windows security information in Windows

11/10 you need to know:

• Windows Security is typically built-in to Windows. It includes an

antivirus program named Microsoft Defender Antivirus. (Early Windows 10
versions call it Windows Defender Security Center).

• If your system has another antivirus solution installed and turned on,
the Microsoft Defender Antivirus turns off automatically.

• If you uninstall or turn off the third-party antivirus app, Microsoft

Defender Antivirus will turn on automatically.

Use the Following ways to Stay protected with Windows Security:

1. Set up User Account Control in Windows 10

2. Use Windows Defender for Windows Security
3. Run a quick scan in Windows Security
4. Run an advanced scan in Windows Security
5. Use Windows Firewall
6. Turn Microsoft Defender Antivirus real-time protection on or off.
7. Use Windows SmartScreen

Set up User Account Control in Windows 10

The User Account Control (UAC for short) interface comes into the
picture when you’re using an application that attempts to make changes
on your computer. Many malicious software aims to exploit the ability
to do this and attempt to create holes in your security by modifying
your settings. UAC makes sure this doesn’t happen.

UAC will temporarily lock your screen whenever an application tries to

change your computer’s settings until an administrator confirms the
action. This gives you a moment to review the details of the software
and potentially do research before allowing it to make modifications to
your system.
Here’s how to turn on the User Account Control in Windows 10 and configure
it to your liking.

1. Press the Windows and S keys to bring up the search bar or start
typing in your taskbar search area. (If you can’t see the search
field, right-click the Start button and choose Search.)

2. Type User Account Control in the search field.

3. Click on Change User Account Control settings from the search

results.

4. To turn UAC on, drag the slider up to the level of security you
desire on your device, then click OK.

5. Drag the slider down to Never notify and click OK to turn UAC off.
(Not recommended).

6. If prompted, confirm your selection by entering an administrator

password.

7. Restart your computer for the change to take effect.

Use Windows Defender for Windows Security

Windows Defender is Windows 10’s native Windows Security solution
against malware and other malicious threats (anti-malware protection).
It’s essentially a built-in antivirus to keep you safe when browsing
the internet, downloading, or receiving files. It’s capable of
conducting regular scans on your device, looking through your data,
and finding even hidden malware or potentially malicious applications.

Unlike many third-party antivirus solutions, Windows' Microsoft

Defender protects you in real-time without slowing down your device.

Here’s how you can turn Microsoft defender antivirus on and start
securing your computer.

1. Click on the Start menu in your taskbar. This icon has the
Windows 10 logo on it.

2. Select the Settings icon, indicated by a gear. Alternatively, you

can use the Windows + I keyboard shortcut to reach this
application quicker.

3. Click on the Update & Security tile.

4. Switch to the Windows Security tab, then click on the Open

Windows Security button.

5. Manage your settings by clicking on any of the tiles here. After

making changes, reboot your computer to finalize the process.

Run a quick scan in Windows Security

To run a quick scan using Microsoft defender antivirus:

1. Select Start > Settings > Update & Security > Windows
Security and then Virus & threat protection (Microsoft Defender
antivirus). Open Windows Security settings - windows defender
security center
2. Under Current threats, select Quick Scan (or in early versions of
Windows 10, under Threat history, select Scan now).

If the Scan doesn’t find any issues, but you’re still concerned, you
may want to check your device more thoroughly.
Run an advanced scan in Windows Security

Despite your best efforts to use safe practices, and even after a
quick scan, you may find yourself with a virus or malware on your
operating system.

Malware is not fun and often slows down the functionality of your
computer. If they persist, you may need to use Windows Defender to run
an advanced system scan.

To do so using Microsoft defender antivirus, just follow these easy

steps.

1. Select Start > Settings > Update & Security > Windows
Security and then Virus & threat protection.

2. Under Current threats, select Scan options (or in early versions

of Windows 10, select Run a new advanced scan) under Threat
history.

3. Select one of the scan options:

• Full Scan (check files and programs currently running on your

device)
• Custom scan (scan specific files or folders)
• Microsoft Defender Offline scan (run this Scan if your device
has been, or could potentially be, infected by a virus or
malware).

• Select Scan Now.

Use Windows Firewall

The firewall focuses on protecting your internet connection and

your network.

Here’s how to turn it on and secure your device against another layer
of attacks.
 1. Press the Windows and S keys to bring up the search bar or start
typing in your taskbar search area. (If you can’t see the search
field, right-click the Start button and choose Search.)

2. Type Control Panel in the search field. Once the interface opens,
make sure to change your viewing mode to either Large
icons or Small icons.

3. Click on Windows Defender Firewall. Click on the Turn Windows

Firewall on and off-link in the left-side panel in the new
window. If prompted, confirm your selection by entering a Windows
10 administrator password.

4. Make sure to select Turn on Windows Defender Firewall for both

Private network settings and Public network settings. When done,
click the OK button.

Turn Microsoft Defender Antivirus real-time protection on or off.

You may sometimes need to stop running Windows Defender real-time

protection briefly. But not that while real-time protection is off,
files you open or download won’t be scanned for malware and other
threats. However, real-time protection will soon turn on automatically
to protect your device.

To turn Microsoft defender antivirus real-time protection off

temporarily.

1. Select Start > Settings > Update & Security > Windows Security

2. Go to Virus & threat protection > Manage settings. (In early

versions of Windows 10, select Virus & threat protection > Virus
& threat protection settings.) Open Windows Security settings

3. Switch the Real-time protection setting to Off and choose Yes to

verify.

Use Windows SmartScreen

If your computer detects any suspicious activity when opening a file
or application, you’ll see the Windows SmartScreen freeze activity on
your device. This state goes on until you either cancel or approve the
action.

In most cases, you should always cancel the opening of a potentially

malicious file unless you can verify that it won’t harm your device.

Here’s how you can turn Windows SmartScreen on when using Windows 10:

1. Click on the Start menu in your taskbar.

2. Select the Settings icon, indicated by a gear. Alternatively, you

can use the Windows + I keyboard shortcut to reach this
application quicker.

3. Use the search field and type in SmartScreen. Here, click on App
& browser control to quickly open the appropriate page in the
Windows Security application.

4. Toggle all SmartScreen-related settings to either Block, Warn,

or On, depending on your preference.

5. Reboot your device to finalize the changes.

How to Maintain Windows Security Windows 10

Here’s how to maintain your Windows security in your Windows 10 OS.

1. Updating Windows
2. By creating Backups
3. Schedule your own scan time for Windows security

Updating Windows
Updating your operating system is one of the best ways to ensure
you’re left with no security holes.

Here’s how to update Windows 10 to the latest available version.

 1. Click on the Start menu, press the Windows key on your keyboard,
and then choose Settings. This application has an icon shaped
like a gear.

2. Alternatively, use the Windows + I keyboard shortcut for quicker

access to the Settings app.

3. You should see various tiles appear on the screen, all leading to
different configuration centers for your device. Here, click on
the Update & Security tile.

4. Switch to the Windows Update tab using the left-side pane.

5. Click on the Check for updates button. This feature requires an

active connection to the internet, so Windows 10 can detect any
new versions available for you to download.

6. If an update is found and you’re eligible for the download, click

on the Install button. You need to wait for Windows 10 to
download and apply the update, which may take an extended time.

7. Make sure that you don’t end your connection to the internet
during the update, plug your device out, or manually turn off
your device. These actions run a high risk of disrupting the
update process and may lead to system corruption and data loss.

8. Once your computer finishes updating, you should be on the latest

Windows 10 currently available to you.

By creating Backups

Creating a system backup can save your data even if your device is
infected by malware or under attack by a hacker. Here’s how to set up
backups on Windows 10.

1. Click on the Start menu in your taskbar.

2. Select the Settings icon, indicated by a gear. Alternatively, you

can use the Windows + I keyboard shortcut to reach this
application quicker.

3. Click on the Update & Security tile.

4. Switch to the Backup tab. To start backing up, click on the + Add
drive button and select which local drive you want to use for
storing backups. Follow all on-screen instructions to start
backing up the desired data.
Schedule your own scan time for Windows security

Even though Windows Security is regularly scanning your device to

maintain security and keep it safe, you can set when and how often the
scans occur.

To schedule a Windows security scan with Microsoft defender antivirus

use the following steps:

1. Select the Start button and type schedule tasks in the Search box

2. In the list of results, select Task Scheduler.

3. Select the arrow (>) next to Task Scheduler Library in the left
pane to expand it. Then do the same with Microsoft > Windows.

4. Next, scroll down and select the Windows Defender folder.

5. In the top-center pane, select Windows Defender Scheduled

Scan. (Point to the choices to see the full names.)

6. In the Actions pane on the right, scroll down and then

select Properties.

7. In the window that opens, select the Triggers tab, and then
select New.

8. Set your preferred time and frequency, and then select OK.

9. Review the schedule and select OK.

How to create a user password in Windows 10

If you want to protect your Windows 10 laptop/desktop computer from

unknown access, you can put a password on Windows 10 user account.

There are 3 efficient ways on how to create password for user account on
Windows 10 computer:

1. Create user password in Computer Management

2. Set password for user account in PC settings
3. Put password on user account in Control Panel
How to Set Password for User Account in Windows 10

Way 1: Create user password in Computer Management.

Step 1: Access Computer Management.

Step 2: Open the Users folder in Local Users and Groups.

Step 3: Right-click a user account and choose Set Password.

Step 4: Tap Proceed to continue.

Step 5: Enter a new password, reenter it and click OK.

After these five steps, a dialog shows up, prompting that the password
has been set. In other words, your Windows 10 computer is protected with
the password. Everyone should enter the password when they login Windows
10 using your account.
Way 2: Set password for user account in PC settings.

Step 1: Open PC settings.

Step 2: Click Users and accounts.

Step 3: Choose Sign-in options and tap the Add button under Password.
Step 4: Type a new password, retype it, input password hint and click Next.

Tip: In this method, the password hint is a required field.

Step 5: Choose Finish.

Way 3: Put password on user account in Control Panel.

Step 1: Enter Control Panel.

Step 2: Tap Change account type to move on.

Step 3: Select a user account.

Step 4: Choose Create a password.

Step 5: Enter a new password, reenter it, type password hint and click Create password.

Tip: The password hint is not a required field in this method, so you
can skip the password hint box.
References: