[SOLVED] What is VBS (Virtualization based security)?

[wabale97]

I run it to conflict with VBS lately. Some of my programmes won't start with VBS enable.
Is it the core windows security feature?
Is it bad to turn it off?
How to turn it off?
I looked everywhere still didn't get a clear answer.

 

[Colif]

Virtualization-based security, or VBS, uses hardware virtualization features to create and isolate a secure region of memory from the normal operating system. Windows can use this "virtual secure mode" to host a number of security solutions, providing them with greatly increased protection from vulnerabilities in the operating system, and preventing the use of malicious exploits which attempt to defeat protections.

VBS uses the Windows hypervisor to create this virtual secure mode, and to enforce restrictions which protect vital system and operating system resources, or to protect security assets such as authenticated user credentials. With the increased protections offered by VBS, even if malware gains access to the OS kernel the possible exploits can be greatly limited and contained, because the hypervisor can prevent the malware from executing code or accessing platform secrets.


Similarly, user mode configurable code integrity policy checks applications before they're loaded, and will only start executables that are signed by known, approved signers. HVCI leverages VBS to run the code integrity service inside a secure environment, providing stronger protections against kernel viruses and malware. The hypervisor, the most privileged level of system software, sets and enforces page permissions across all system memory. Pages are only made executable after code integrity checks inside the secure region have passed, and executable pages are not writable. That way, even if there are vulnerabilities like a buffer overflow that allow malware to attempt to modify memory, code pages cannot be modified, and modified memory cannot be made executable.

https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-vbs

Is it the core windows security feature?

Yes

Is it bad to turn it off?
How to turn it off?

Yes, and I don't think you can