In my recent survey of the UltimateWindowsSecurity.com community over 50% listed Anti-Malware as important to you in 2008 for training and product shopping so I think you’ll benefit from registering for my webinar later this month on Application White Listing.
https://www1.gotomeeting.com/register/910941268
Here’s why: one of the most compelling benefits of the emerging technology of Application While Listing is its ability to prevent malware without a constantly updated database of anti-virus signatures. The idea is simple but elegant. Stop all software (EXEs, scripts, macros, etc) from executing except for known and approved items based on the hash signature of the software component.
In this webinar I’ll discuss where the industry is on this challenge and I think you’ll be impressed with what while listing players like our sponsor for this webinar (Bit9) have been able to accomplish. But in general here’s what you should expect:
With a good while listing product you can press a single button and temporarily block all new installations of unknown software even by normally privileged users. This is great if you know a new worm or virus is heading your way but your AV provider says they won’t have a patch for 8 hours or more.
Of course the challenge is making sure you don’t block known and legitimate software and that your controls are flexible enough to accommodate all the exceptions and one-offs that the real world throws at you. You should expect a good application while listing vendor to provide a regularly updated library of common software used and trusted by most companies today. For the majority of your trusted software you don’t need to compute the EXE hashes and set up the policies. You just pick and choose what you want from the canned list. For the remaining one off programs you set up allow policies.
At this point 95% of your users will probably be able to do their normal work without any interruption. Beyond that you should be able to configure power users who are allowed to install unknown software but you should still receive notification and reporting on such installations and have the ability to go back and reverse them.
Please register now even if you can’t make the live event – we’ll send you a link to the recording:
Date: Thursday, January 24, 2008
Thanks as always for reading and best wishes on security,
Randy Franklin Smith
Here are some coupon codes you can use! They expire in 7 days though, so don't let this opportunity pass you by.
Edition Coupon code Savings
Bronze QRB $10
_______________________________________________________________________________
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk.
No comments:
Post a Comment