CoreTrace WhiteSpace

The Application Whitelisting and Security Weblog

A clean sweep: Bouncer helps defeat all of SC Magazine’s “Top 5 Threats” of 2010

December is a time for lists. There’s holiday wish lists, year-in-review lists, and so on.

This week, SC Magazine published its list of top security topics and stories for 2010. Among the various lists the staff compiled for the article, “IT security: The year in lists,” was the year’s “Top Five Threats”. What’s interesting is that this particular list is a mirror-image of what we’ve been blogging about all year — and that all five are threats that CoreTrace’s Bouncer application whitelisting solution help thwart.

Starting in January, we’ve written specific blogs on four of the top five threats mentioned. And the one that we haven’t blogged on, we know Bouncer can help defeat. Here is the recap:

Top endpoint security stories for January 2010 – Operation Aurora dominates news

Looking back, I have to say that January brought some security industry setbacks, highlighted by Operation Aurora and the publicity surrounding Google’s claims of highly coordinated attacks from China. Particularly relevant to us in these attacks is the fact that application whitelisting would have stopped the attacks while anti-virus was once again helpless to prevent new and targeted attacks. As always, I appreciate your readership and hope that this blog continues to bring value and insight to what we as security professionals are up against in 2010. So without further delay, here were some of the top stories from January 2010. Continue reading this post…

Operation Aurora illustrates greater need for effective preventative endpoint security

Much has already been written about the impact of Operation Aurora on the threat landscape. The international attacks on some of the world’s leading Internet companies reminded us once again of the vulnerabilities within interconnected networks that can be accessed from virtually anywhere in the world.

These attacks also illustrate the growing need for, and strength of, application whitelisting solutions. As Aurora first gained access by attacking an endpoint within Google’s network to trick a user into installing malware, even leading antivirus software designed to detect such viruses and malicious code couldn’t stop it from running within the network. Continue reading this post…