

Even if the system gets infected with malware, the malware can be contained and its damaging effects reduced. Virtualization-based security (VBS) is used to create and isolate a region of memory from the rest of the operating system so processes can run in a secure and controlled environment, called "virtual secure mode".

With Windows 11, Microsoft is focusing on security in response to rapidly evolving cyberthreats. Windows 11 requires newer CPUs and motherboards that can support advanced security features such as virtualization-based security (VBS), memory integrity or hypervisor-protected code integrity (HVCI), and Secure Boot. These features are turned on by default to increase protection against malware.
