Mid ka mid ah yoolalka ugu weyn ee Microsoft ee dhammaan isticmaalayaasha Windows waa amniga, waxayna noqon doontaa mid xiiso leh in la ogaado sida Microsoft u aqoonsato Malware iyo Codsiyada aan la rabin ee suurtagalka^{(Potentially Unwanted Applications)} ah. Waxaan dhawaan ka hadalnay xannibaadda Codsiga aan la rabin ee suurtagalka ah ee Edge,^{(Potentially Unwanted Application blocking in Edge,)} waana mid ka mid ah siyaabaha lagu hubin karo in khibradda Windows ay tahay mid badbaado ah.

Microsoft waxay isticmaashaa habab dhinacyo badan leh si ay uga caawiso macaamiisheeda inay maareeyaan khatartooda.

Habkani waxa ku jira saddex walxood oo muhiim ah:

1. Cusboonaysiinta amniga tayada sare leh - iyadoo la adeegsanayo hababka injineernimada heerka caalami si loo soo saaro cusboonaysiinta amniga tayada sare leh oo si kalsooni leh loogu diri karo in ka badan bilyan nidaamyo kala duwan oo ku jira nidaamka deegaanka PC oo ka caawiya macaamiisha inay yareeyaan carqaladaha ganacsigooda;
2. ^(Community)Difaaca bulshada ku salaysan - Microsoft waxay la shuraakoobaysaa dhinacyo kale oo badan marka la baadho dayacanka suurtagalka ah ee software Microsoft . Microsoft waxay eegtaa inay yarayso ka faa'iidaysiga dayacanka iyada oo loo marayo xoogga iskaashiga ee warshadaha iyo la-hawlgalayaasha, ururada dadweynaha, macaamiisha, iyo baarayaasha amniga. Habkani waxa uu caawinayaa in la yareeyo carqaladaynta iman karta ganacsiyada macaamiisha Microsoft ;
3. Habka jawaab celinta amniga ee dhamaystiran^{(Comprehensive)} - shaqaaleysiinta habsocodka jawaabta amniga oo dhamaystiran oo ka caawiya Microsoft si wax ku ool ah u maareyso shilalka amniga iyadoo la siinayo saadaalinta iyo daahfurnaanta ay macaamiishu u baahan yihiin si loo yareeyo carqaladaynta ganacsigooda.

Suurtagal maaha in si buuxda looga hortago dayacanka in la soo bandhigo inta lagu jiro horumarinta mashaariicda baaxadda leh ee software. Ilaa iyo inta aadanuhu qoraan code software, ma jiro software ah oo qumman oo khaladaadka u horseedaya cilladaha software-ka waa la samayn doonaa. Cilladaha qaarkood ("caytaan") ayaa si fudud uga hortagaya software-ku inuu u shaqeeyo sidii loogu talagalay, laakiin kutaannada kale ayaa laga yaabaa inay soo bandhigaan baylahda. Ma aha dhammaan baylahda sinnaanta; baylahda qaar ma noqon doonto mid laga faa'iidaysto sababtoo ah yaraynta gaarka ah waxay ka hortagtaa weeraryahannada inay isticmaalaan. Si kastaba ha ahaatee^{(Nevertheless)} , boqolkiiba nuglaanta ka jirta qayb software ah ayaa keenaysa suurtagalnimada in laga faa'iidaysto.

Sidee Microsoft u aqoonsataa Malware & PUPs

Afarta saldhig ee waaweyn ama shuruudaha kala soocida Microsoft adeegsato waa:

1. Software xaasidnimo ah ama Malware
2. Software-ka aan la rabin
3. Jawaab celinta Macmiilka
4. Codsiyada^{(Applications)} aan la rabin ( PUA ) ama kuwa aan la rabin (^(PUP) PUP )^(Programs) .

Qaar ka mid ah software-ku qasab maaha inay waxyeello u geystaan, laakiin waxay kharribaan khibradaha Windows . Waxay ku sameeyaan iyaga oo ku rakibaya codsiyada iyada oo aan la isticmaalin aqoonta isticmaalaha ama u adeega xayeysiiska ogolaansho la'aan.

1] Software xaasidnimo ah

Kuwani waa codsiyo iyo software kuwaas oo wax u dhimaya amniga isticmaalaha. Waxay xaddi karaan macluumaadkaaga khaaska ah, macluumaadka kaadhka deynta, iyo xitaa xidhi karaan faylashaada. Midka ugu dambeeya waxaa la yiraahdaa Ransomware , oo ah mid ka mid ah noocyada ugu xun ee malware-ka ee aan aragnay sannadihii ugu dambeeyay. Waa mid ka mid ah sababaha ay Windows Security u soo bandhigtay gelitaanka Folderka Kontoroolka iyo OneDrive Personal Vault.

Waa kuwan liiska hababka ama habka Microsoft u kala saarto si loo aqoonsado software-ka Malware:

• Albaabka dambe
• Soodejiye
• Tuur
• Ka faa'iidayso
• Hacktool
• Fayraska Macro
• Obfuscator
• Xaday erayga sirta ah
• Ransomware
• Software-ka badbaadada xun
• Trojan
• Tuujiye Trojan
• Gooryaanka

la xidhiidha:  ^(Related: ) Farqiga u dhexeeya Virus, Trojan, Worm, Adware, Spyware, Rootkit, Malware, Backdoor, iwm

2] Software-ka aan la rabin

Kuwani waa software-ka carqaladeeya khibradaada Windows. Sida laga soo xigtay Microsoft , softiweerku waa inuu ilaaliyaa isticmaalaha, oo maahan si kale. Iyadoo ku xiran hab-dhaqanka, Microsoft waxay aqoonsan kartaa ka dibna uga digi kartaa isticmaalaha wax ku saabsan codsiyada aan la rabin ee ku dhaca qaybahan.

• Doorasho la'aan
• Xakameyn la'aanta
• Rakibaadda iyo saarista
• Xayeysiinta iyo xayaysiisyada.

Doorasho la'aan^{(Lack of choice)}

Software-ka aan ujeeddo cad lahayn, wareejinta xogta xagga dambe, rakibta ama ka saarta software-ka, qarinta isticmaalayaasha ayaa ku dhaca qaybtan. Microsoft sidoo kale waxay kala saartaa software-ka aan loo baahnayn haddii ay kiciso digniino been ah oo ku saabsan caafimaadka qalabkaaga ama ay ku weyddiisato lacag si loo hagaajiyo. Waxa jira barnaamijyo badan oo sheega in ay dedejiyaan kombayutarkaga. Waxay ku sameeyaan iyaga oo abuuraya sheegashooyin been ah ka dibna waxay ku siinayaan inaad iibsato nooca pro si aad u hagaajiso.

Xakameyn la'aanta^{(Lack of control)}

Software kasta oo la wareegaya waayo-aragnimada browserka, beddela goobaha raadinta, jiheeya taraafikada shabakada ogolaansho la'aan, ama wax ka beddela waxa ku jira ogolaansho la'aan isticmaale. Waxaan aragnay software badan oo loo isticmaali jiray in lagu beddelo mashiinka raadinta caadiga ah ama lagu rakibo qalabyada inta lagu jiro rakibidda. Malaha waa mid ka mid ah dhibaatooyinka ugu dhibka badan.

Khibrada Rakibaadda iyo Rakibaadda Liidata^{(Poor Installation and Uninstallation Experience)}

Apps-ka qaarkood gabi ahaanba ma rarto xitaa marka aad gacanta ka saarto. Waxay ka tagaan ka dambeeya barnaamijyada in ay sii wadaan wax rouge in nidaamka. Qaar ka mid ah waxay isku dayaan in aan la rarin iyaga oo ka qarinaya ku Add/Remove barnaamijyada ama habaabinta marin habaabinta ama pop-ups marka aad isku daydo in aad ka saarto.

Xayeysiinta iyo xayaysiisyada^{(Advertising and advertisements)}

In kasta oo ay fiican tahay in la xayaysiiyo, laakiin waa in ay qaadato oggolaanshaha isticmaalaha. Barnaamijyada qaarkood waxay xayaysiiyaan sooftiweeradooda gudaha ama software qolo saddexaad si ay lacag u sameeyaan. Waxa ugu xun waa in ay kaa dhigaan in aad gujiso xayaysiisyadan oo kale iyaga oo soo dejinaya faylasha ama furaya bog internet. Waxay xitaa xannibaan aragtida oo dhan, fursadahana waa inaadan waligaa ka heli doonin badhan u dhow xayeysiisyadaas.

3] Jawaab celinta macaamiisha

Haddii aad aragto ama aad la kulanto software noocaas ah, waxaad had iyo jeer soo gudbin kartaa software si loo gorfeeyo^{(submit a software for analysis)} .  Microsoft waxa kale oo ay isticmaashaa Windows Security iyada oo la socota tan u fududaynaysa macaamiisha inay ka warbixiyaan codsiyadaas. Haddii dad badan oo isticmaala ay soo sheegaan software marar badan, waxay kor u qaadaysaa calanka cas.

Tusaalaha caadiga ah waa CCleaner . Hal mar, waxay ahayd codsi ay qasab ku tahay dhammaan isticmaalayaasha Windows . Kadib isticmaaleyaal badan ayaa soo sheegay in utility-ga aan lagu talin karin mar dambe. Microsoft waxay ka jawaabtay xiriiriyeyaasha CCleaner ee liiska madow ku jira .

4 ]^{(] Potentially)} Codsi aan la rabin ( PUA )

Codsiyada suurtogalka ah ee aan la rabin^{(Potentially Unwanted Applications)} maaha malware, laakiin Microsoft waxay^(Microsoft) xannibaysaa soo dejinta codsi kasta ama software kasta oo ku dhaca qaybaha sare iyo wax ka badan. PUAs waa codsiyada muujinaya dabeecadaha soo socda ama ku dhaca qaybahan:

• Xayeysiinta
• Torrent
• Cryptomining
• Isku xidhka^(Bundling)
• Suuqgeynta
• Ka baxsashada
• Sumcada warshadaha oo liidata.

Waxaan rajeynayaa in boostada ay kaa caawisay inaad fahamto waxa ay ku qaadato Microsoft ama malaha shirkad kasta oo amniga si ay u aqoonsato malware iyo codsiyada aan la rabin.

How does Microsoft identify Malware & Potentially Unwanted Applications

Оne of the biggest goals of Microsoft for all Windows users is security, and it wоuld be interesting to know how Microsoft identifies Malware and Potentially Unwanted Applications. We recentlу talked about Potentially Unwanted Application blocking in Edge, and it is one of the ways to make sure Windows experience remains safe.

Microsoft uses a multipronged approach to help its customers manage their risks.

This approach includes three key elements:

1. High quality security updates – using world class engineering practices to produce high quality security updates that can be confidently deployed to over a billion diverse systems in the PC eco-system and help customers minimize disruptions to their businesses;
2. Community based defense – Microsoft partners with many other parties when investigating potential vulnerabilities in Microsoft software. Microsoft looks to mitigate exploitation of vulnerabilities through the collaborative strength of the industry and through partners, public organizations, customers, and security researchers. This approach helps to minimize potential disruptions to Microsoft’s customers’ businesses;
3. Comprehensive security response process – employing a comprehensive security response process that helps Microsoft effectively manage security incidents while providing the predictability and transparency that customers need in order to minimize disruptions to their businesses.

It is impossible to completely prevent vulnerabilities from being introduced during the development of large-scale software projects. As long as human beings write software code, no software is perfect and mistakes that lead to imperfections in software will be made. Some imperfections (“bugs”) simply prevent the software from functioning exactly as intended, but other bugs may present vulnerabilities. Not all vulnerabilities are equal; some vulnerabilities won’t be exploitable because specific mitigations prevent attackers from using them. Nevertheless, some percentage of the vulnerabilities that exist in a given piece of software poses the potential to be exploitable.

How does Microsoft identify Malware & PUPs

The four major basis or criteria for classifications by Microsoft uses are:

1. Malicious Software or Malware
2. Unwanted software
3. Consumer Feedback
4. Potentially Unwanted Applications (PUA) or Potentially Unwanted Programs (PUP).

Some of the software is not necessarily harmful, but it does spoil Windows experience. They do it by either installing applications without user knowledge or serve advertisements without consent.

1] Malicious software

These are applications and software which compromise user security. They can steal your personal information, credit card information, and even lock down your files. The last one is called Ransomware, which is one of the worst forms of malware we have seen in recent years.  It is one of the reasons why Windows Security introduced Controller Folder Access and OneDrive Personal Vault.

Here is the list of methods or process Microsoft classifies to identify the software as a Malware:

• Backdoor
• Downloader
• Dropper
• Exploit
• Hacktool
• Macro virus
• Obfuscator
• Password stealer
• Ransomware
• Rogue security software
• Trojan
• Trojan clicker
• Worm.

Related:  Difference between Virus, Trojan, Worm, Adware, Spyware, Rootkit, Malware, Backdoor, etc

2] Unwanted software

These are the software that disrupts your Windows experience. According to Microsoft, software should keep the user in control, and not the other way round. Depending on the behavior, Microsoft can identify and then warn the user about any Unwanted Applications that fall into these categories.

• Lack of choice
• Lack of control
• Installation and removal
• Advertising and advertisements.

Lack of choice

A software without clear intent, transfer data in the background, installs or removes software, hides from users fall into this category. Microsoft also classifies unwanted software if it triggers false alarms about your device’s health or asks for payment to fix it. There are tons of software that claim to speed up your computer. They do it by creating false claims and then offer you to buy the pro version to fix it.

Lack of control

Any software which takes over browser experience, change search settings, redirect web traffic without consent, or modify the content without user consent. We have seen a lot of software which used to change the default search engine or install toolbars during installation. Probably one of the most annoying problems.

Poor Installation and Uninstallation Experience

Some apps do not entirely uninstall even when you manually uninstall them. They leave behind programs that keep doing something rouge to the system. Some of them try their best not to get uninstalled by either hiding from Add/Remove programs or misleading prompts or pop-ups when you try to uninstall it.

Advertising and advertisements

While it is ok to advertise, but it should take user consent. Some apps advertise their inhouse software or third party software to make money. The worst part is that they make you click such an advertisement either by downloading files or opening a webpage. They even block the entire view, and the chances are that you will never find a close button for such advertisements.

3] Consumer Feedback

If you see or experience such software, you can always submit a software for analysis.  Microsoft also uses Windows Security in conjunction with this making it easy for consumers to report about such applications. If a lot of users report a software a lot of times, it raises a red flag.

A classic example is CCleaner. At one point in time, it was a must-have application for all Windows users. Later many users reported that the utility could not be recommended anymore. Microsoft Answers blacklisted CCleaner links.

4] Potentially unwanted application (PUA)

Potentially Unwanted Applications are not malware, but Microsoft blocks download of any application or software that falls into the above categories and more. PUAs are those applications which show the following behaviors or fall into these categories:

• Advertising
• Torrent
• Cryptomining
• Bundling
• Marketing
• Evasion
• Poor industry reputation.

I hope the post helped you to understand what it takes for Microsoft or probably any security company to identify malware and potentially unwanted applications.

Related posts

• Soo-gudbinta Malware: Halkee loo gudbiyaa faylasha malware-ka Microsoft iyo kuwa kale?

• Sida looga saaro Digniinta Virus-ka Microsoft ee Windows PC

• Habka Logo Microsoft ee Maamulaha Hawsha; Ma fayras baa?

• Sida loogu daro Zoom kooxaha Microsoft

• Microsoft Intune miyaanay wada shaqayn? Ku qas Intune in ay isku xidho Windows 11/10

• Jooji ama Jooji Microsoft Edge Talooyin iyo Ogeysiisyada soo booda

• Sida loo dhaqan geliyo Raadinta Badbaadada Google ee Microsoft Edge gudaha Windows 10

• 5ta ugu sareysa waa inay lahaadaan software bilaash ah oo ka socota Microsoft

• Sida loogu rakibo kooxaha Microsoft Linux iyo macOS

• Deji taariikhda uu dhacayo erayga sirta ah ee Koontada Microsoft iyo Koontada Maxaliga ah

• Hagaaji cilada soo galitaanka dukaanka Microsoft 0x801901f4 Windows 11/10

• Koontada Microsoft ee aad gelisay ma jiro

• Microsoft Excel waxay isku dayaysaa inay soo ceshato macluumaadkaaga

• Sida loo rakibo Mawduucyada Chrome ka ee browserka Microsoft Edge

• Waa maxay faylka ASD iyo sida loo furo Microsoft Word?

• Kaaliyaha Desktop Fog ee Microsoft ee Windows 10

• Sida loo isticmaalo Sawirka qaabka Sawirka ee Microsoft Edge Browser

• Sida loo damiyo calaamadaha Paragraph ee Microsoft Word

• Sida si toos ah loogu gudbiyo iimaylka gudaha Microsoft Outlook

• Maamul abka mareegaha ee dhaxalka leh ee leh Xariirka Liiska Goobta Ganacsiga ee Microsoft