Stopping Malware without Waiting on Signature Updates

In my recent survey of the UltimateWindowsSecurity.com community over 50% listed Anti-Malware as important to you in 2008 for training and product shopping so I think you’ll benefit from registering for my webinar later this month on Application White Listing.

https://www1.gotomeeting.com/register/910941268

Here’s why: one of the most compelling benefits of the emerging technology of Application While Listing is its ability to prevent malware without a constantly updated database of anti-virus signatures. The idea is simple but elegant. Stop all software (EXEs, scripts, macros, etc) from executing except for known and approved items based on the hash signature of the software component. 

In this webinar I’ll discuss where the industry is on this challenge and I think you’ll be impressed with what while listing players like our sponsor for this webinar (Bit9) have been able to accomplish. But in general here’s what you should expect:

With a good while listing product you can press a single button and temporarily block all new installations of unknown software even by normally privileged users. This is great if you know a new worm or virus is heading your way but your AV provider says they won’t have a patch for 8 hours or more.

Of course the challenge is making sure you don’t block known and legitimate software and that your controls are flexible enough to accommodate all the exceptions and one-offs that the real world throws at you. You should expect a good application while listing vendor to provide a regularly updated library of common software used and trusted by most companies today. For the majority of your trusted software you don’t need to compute the EXE hashes and set up the policies. You just pick and choose what you want from the canned list. For the remaining one off programs you set up allow policies. 

At this point 95% of your users will probably be able to do their normal work without any interruption. Beyond that you should be able to configure power users who are allowed to install unknown software but you should still receive notification and reporting on such installations and have the ability to go back and reverse them.

Please register now even if you can’t make the live event – we’ll send you a link to the recording:

Space is limited.
Reserve your Webinar seat now at:
https://www1.gotomeeting.com/register/910941268

 

Title:   Application Whitelisting: What is It and When Do You Need It?
Date:  Thursday, January 24, 2008

Time:  12:00 PM - 1:00 PM EDT

Thanks as always for reading and best wishes on security,

Randy Franklin Smith

______________________________________________________________________________

 

All of Randys webinars and more are available online! Click here

Here are some coupon codes you can use! They expire in 7 days though, so don't let this opportunity pass you by.
Edition          Coupon code           Savings
Bronze                QRB                    $10

Silver                  QRS                     $25

Gold                   QRG                    $50
_______________________________________________________________________________

 

To foward this to a friend please click here

 

http://www.ultimatewindowssecurity.com/enews/members.aspx?Task=FF&SI=12379&E=security.world%40gmail.com&S=1&N=34&Format=HTML

 

To opt out please click here

 

http://www.ultimatewindowssecurity.com/enews/members.aspx?Task=OO&SI=12379&E=security.world%40gmail.com&S=1

________________________________________________________________________________

Ultimate Windows Security is a division of Monterey Technology Group, Inc. ©2006-2007 Monterey Technology Group, All rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk.

 

You may forward this email in its entirety but all other rights reserved.