Whitelists rather than blacklists may be the future of network and computer security, according to IT experts.
Whitelisting is the process by which only pre-approved applications are able to execute on a network – while unknown and unwanted ones are blocked. It is the opposite of today’s approach – by which applications are free to run unless an administrator has moved to block them. Today’s blacklisting approach, says AusCert general manager Graham Ingram, is simply not working. Defences against malware, he says, can be completely undermined “by the click of a mouse or the enter key of a user”.
An obvious question though, could crackers find a way to manipulate whitelists?
Comments are closed. Please send a message if you want though.