January 8, 2013

Application whitelist - the good, bad and evil


We know that...

The common way to protect operating systems from malicious attacks is by installing endpoint protection system to prevent malwares, zero-day attacks and all the cool stuff we know.
However, there is additional concept of white listing all operating system's files and not allowing any other applications to run, e.g. Bit9 Parity product. 

The good

It can prevent from unauthorized applications to execute.

The bad

If the operating system is already infected, the malicious activity will continue to operate.


The evil

- If the protection is based on MD5 hash, it can be bypassed using MD5 collision attack.
- Sometimes runtime environments might be used for malicious software execution, e.g. if Java Runtime Environment (JRE) is installed on the operating system, then malicious java code can run (currently still work on Bit9 Parity).

7 comments:

  1. Hi, Great.. Tutorial is just awesome..It is really helpful for a newbie like me.. I am a regular follower of your blog. Really very informative post you shared here. Kindly keep blogging. If anyone wants to become a Java developer learn from Java Training in Chennai. or learn thru Java Online Training in India . Nowadays Java has tons of job opportunities on various vertical industry.

    ReplyDelete
  2. Your new valuable key points imply much a person like me and extremely more to my office workers. With thanks; from every one of us.

    java training in bangalore

    ReplyDelete
  3. Attractive blog post! I should read from some useful news for this blog section, It 's a great content Keep it useful sharing.
    Electrical Project Center in Chennai | Electrical Project Center in Velachery | Best Electrical Projects in Velachery

    ReplyDelete
  4. This comment has been removed by the author.

    ReplyDelete
  5. I have a collection of games and apps at the best Android security store. Have you got it? You are looking for more exciting games. Does your application have the best memory? I have the best quality app store you can refer and find here: Iplaystoredownloadfree

    These are the most downloaded stores in 2018:

    - Google Play windows phone
    - How to fix Play Store errors
    - Play Store for SamSung

    Wish you have the best games and applications. Free apps for everyone in the world. Thank you!

    ReplyDelete