Thursday, June 12, 2008

Redefining Anti-Virus Software

From The Washington Post Blog

Microsoft Windows users have long been advised to shield their PCs from attacks by using anti-virus software, which principally relies on technology designed to quarantine or delete files that possess certain characteristics of known hostile programs.

But as the anti-virus firms continue to struggle to stand their ground amid a flood of new malicious programs being unleashed each day, a complementary approach to fighting malware is beginning to take root. This approach seeks to identify the universe of known good programs and treat the outliers with extreme prejudice.


This is an approach that has long been favoured by security professionals. Indeed, it is considered good practice to define firewall rules in term of banning everything, then allowing only a certain subset of services through the firewall. In addition, companies are now starting to define lists of sites that accessible, and banning the rest.

This follows the same theme; allow only known good programs to run on your computer, and ban the rest.

0 comments: