Security threats Toolkit
Story: The days of desktop antivirus apps are numbered
Some more thought may be required
Whitelisting whilst at first glance appears to be a panacea will need to deal with the following scenarios:
1. How do you deal with an application that for 99.999% of the community is bad but good for the 00.001% Eg L0phtCrack or similar programs, these have a legitimate use in narrowly defined cases but not in the rest.
2. How will the mechanism of getting your application whitelisted work? It may be OK for a large software house but what about the shareware / SME companies?
3. How will they defend against rogue software managing to get onto the whitelist?
These are just the few off the top of my head. But having tried to use various whitelisting products I find that the work involved is huge, which again is great for large corporates with the time to spend but not for smaller ones.
Full Talkback thread









