CoreTrace WhiteSpace

The Application Whitelisting and Security Weblog

Web-based malware breaking traditional AV model

Web-based malware breaks traditional AV modelFor years, antivirus engines have been the primary defense against viruses, worms, Trojans, bots, and all other forms of malware designed to gain access to our emails, social networking sites, and corporate networks. While collecting their signatures from honeypots and gathering self-propagating threats has been useful in detecting malicious behavior in the past, things have changed. Today’s threats aren’t propagating. They’re using social engineering to lure their victims instead, thus breaking the traditional AV model. Continue reading this post…

Cisco’s 2009 Security Threat Report: We need a patch for the common user!

In its 2009 Annual Security Report, released today, Cisco Systems did an excellent job of explaining the 2009 threat landscape and outlining its expectations for 2010.

While the 40 page report covers many, many topics, there was one overarching theme that continued to bubble to the surface for me: there are no patches for people, and people are the primary vulnerability going forward.

Like it or not, our people (employees, contractors, partners, etc.) will continue accessing social media sites, cloud computing solutions and parts of the web that we know nothing about (the “Dark Web” as Cisco calls it). Continue reading this post…

GlobalSCAPE announces investment term sheet with CoreTrace

Earlier today, GlobalSCAPE, Inc. (NYSE Amex: GSB) announced that it has entered into an investment term sheet with CoreTrace. Subject to definitive agreements, GlobalSCAPE will invest in CoreTrace in return for an equity position and a seat on the CoreTrace board of directors.

In the announcement, Jim Morris, president and CEO of GlobalSCAPE, explained part of his company’s interest in CoreTrace:

“Because malware has proliferated exponentially, traditional solutions are increasingly stressed beyond their ability to keep pace with the virus of the day. The CoreTrace whitelisting technology has tremendous potential, similar to the early days of the anti-virus market.” Continue reading this post…

Application whitelisting is coming … are you ready?

Application whitelisting is coming ... are you ready?Sometime in 2010 virtually every new Windows PC will now come with a version of application whitelisting installed in the form of AppLocker. It’s time to start thinking about how application whitelisting will change the way you approach desktop security and how you intend to use whitelisting to protect your critical IT assets. In preparation for this shift, I thought it would be good to give some food for thought about what changes and what considerations you should give to your ultimate whitelisting strategy.

First, let’s look at what changes. Continue reading this post…

Thanks to our customers, partners and employees for helping us change computer security

Thanks to our customers, partners and employees for helping change desktop securityIn the spirit of Thanksgiving week, I wanted to take this opportunity to say thanks to all of our customers, partners and employees who are helping CoreTrace change the face of computer security. It has been a fantastic year so far and we have a lot to be thankful for. More than ever businesses and individuals are looking for a new approach to computer security, and application whitelisting has come to the forefront as an alternative to traditional antivirus.

We are certainly excited to be a top vendor of application whitelisting and are looking to finish the year strong and look forward to a breakthrough 2010.

Thanks again to everyone involved in making CoreTrace a success.