Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Whitelist instead of blacklist

Notifications for Security Updates, as well as News and Information from across the web - mostly security minded.

Update Contributors: Members of the Malware Removal University.

Regular Members: Our Regular Members are invited to start and/or participate in all other topics. Join in and share the news that's important to you.

Whitelist instead of blacklist

Unread postby GGiTzKevin » July 23rd, 2008, 6:52 pm

Antivirus programs, as we know them today, are based on 20-year-old technology of pattern matching. Pattern matching may have worked in the days of the Micheangelo virus and even as recently as Netsky, but methodically matching each and every file on a computer against a list of known malware is getting tedious, if not archaic. In 2007, Symantec detected more than 1 million viruses, with two-thirds created within the calendar year. Loading 1 million signatures, or even a percentage of that if generic signatures are used, is a pretty serious undertaking.

That's why vendors are talking to me about newer strategies for 2009 (and beyond). Among these is the exact opposite of signature file databases--something called whitelisting. If pattern matching is just another way of saying certain bad files have been blacklisted, whitelisting goes to the other extreme: it only allows certain trusted files to run on your machine.



Apparently, because of the growing number of viruses and malware, instead of having signatures of known malware, there will be a whitelist of clean files. Read more http://www.download.com/8301-2007_4-9994679-12.html?tag=fd_morefeatured
Last edited by GGiTzKevin on July 23rd, 2008, 6:53 pm, edited 1 time in total.
GGiTzKevin
Regular Member
 
Posts: 240
Joined: December 6th, 2007, 1:16 am
Advertisement
Register to Remove

Re: Will you be ditching you antivirus?

Unread postby GGiTzKevin » July 23rd, 2008, 6:52 pm

Zero bump :)
GGiTzKevin
Regular Member
 
Posts: 240
Joined: December 6th, 2007, 1:16 am

Re: Whitelist instead of blacklist

Unread postby Sharagoz » September 8th, 2008, 2:11 pm

That's actually quite sick, when it becomes more efficient to keep track of good files rather than the bad files :shock:
User avatar
Sharagoz
Retired Graduate
 
Posts: 985
Joined: February 22nd, 2008, 4:31 pm
Location: Norway

Re: Whitelist instead of blacklist

Unread postby random/random » September 9th, 2008, 5:31 pm

Whitelist based approaches have been around for some time now. Just look at system safety monitor, process guard and other HIPS programs.
User avatar
random/random
Developer
Developer
 
Posts: 7733
Joined: December 18th, 2005, 3:30 pm

Re: Whitelist instead of blacklist

Unread postby MikeSwim07 » September 9th, 2008, 7:21 pm

Bad idea, there are so many new programs being made daily that a lot of files will be "malware"
MikeSwim07
Regular Member
 
Posts: 4215
Joined: August 27th, 2007, 9:44 am
Location: Gone
Advertisement
Register to Remove


Return to News Desk



Who is online

Users browsing this forum: No registered users and 27 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware