Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 787255" data-attributes="member: 32260">It can seem strange why developers and AV vendors cannot make an agreement. There are much more malware executables than legal executables. So, it should be easier to whitelist the legal executables than blacklist the malware. If every developer has submitted his/her executables for whitelisting, then something like BAFS could simply work on the base of the whitelist. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite135" alt=":giggle:" title="Giggle&nbsp; &nbsp; :giggle:" loading="lazy" data-shortname=":giggle:" />For the customers, it would be much better if there were not many AV vendors, but instead, many cooperative Whitelisting vendors and some AV vendors. But, this would be probably not easy for the developers, because they would be forced to pay for whitelisting or the customers would be forced to pay for it (like they already pay for the AV or the Internet connection).<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" /><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite111" alt=":(" title="Frown&nbsp; &nbsp; :(" loading="lazy" data-shortname=":(" />The AVs could focus then on protecting the whitelisting bypass attacks.</blockquote>

[QUOTE="Andy Ful, post: 787255, member: 32260"] It can seem strange why developers and AV vendors cannot make an agreement. There are much more malware executables than legal executables. So, it should be easier to whitelist the legal executables than blacklist the malware. If every developer has submitted his/her executables for whitelisting, then something like BAFS could simply work on the base of the whitelist. :giggle: For the customers, it would be much better if there were not many AV vendors, but instead, many cooperative Whitelisting vendors and some AV vendors. But, this would be probably not easy for the developers, because they would be forced to pay for whitelisting or the customers would be forced to pay for it (like they already pay for the AV or the Internet connection).:emoji_thinking::( The AVs could focus then on protecting the whitelisting bypass attacks. [/QUOTE]

Verification