Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 588755" data-attributes="member: 32260">Windows Software Restriction Policies were not treated by Microsoft as security solution against external threats. Anyway, in default deny setup, this solution was very successful in enterprises, because stopped users to constantly infect computers. I call this &#039;Babysitter Security&#039;. In home users world, it can be even more successful, because malware in the wild is not prepared to bypass such obstacles. The second element of &#039;Babysitter Security&#039; is a good &#039;File Reputation Cloud&#039;. If it gives too many false positives (like Virus Total), the users will soon ignore the alerts. It is possible to use Virus Total, but someone has to think out the smart algorithm to minimize false positives, and there is still the problem of true 0-day malware.Default deny &#039;Babysitter Security&#039; will work best in Windows 10 for several reasons:1. There are useful Windows Store Apps that update in harmony with default deny restrictions, and run safely in AppContainer.2. In the new Windows 10 version, developers have the tool that can transform programs to Windows Store Apps.3. OS and Windows Defender gets stronger.4. Windows SmartScreen gets better.5. Edge gets more useful.6. Less habits have to be changed to accept &#039;Babysitter&#039;.7. Home user can be pretty secure without third party real-time solutions.&#039;Babysitter&#039; still requires the experienced user to solve some default deny configuration problems.</blockquote>

[QUOTE="Andy Ful, post: 588755, member: 32260"] Windows Software Restriction Policies were not treated by Microsoft as security solution against external threats. Anyway, in default deny setup, this solution was very successful in enterprises, because stopped users to constantly infect computers. I call this 'Babysitter Security'. In home users world, it can be even more successful, because malware in the wild is not prepared to bypass such obstacles. The second element of 'Babysitter Security' is a good 'File Reputation Cloud'. If it gives too many false positives (like Virus Total), the users will soon ignore the alerts. It is possible to use Virus Total, but someone has to think out the smart algorithm to minimize false positives, and there is still the problem of true 0-day malware. Default deny 'Babysitter Security' will work best in Windows 10 for several reasons: 1. There are useful Windows Store Apps that update in harmony with default deny restrictions, and run safely in AppContainer. 2. In the new Windows 10 version, developers have the tool that can transform programs to Windows Store Apps. 3. OS and Windows Defender gets stronger. 4. Windows SmartScreen gets better. 5. Edge gets more useful. 6. Less habits have to be changed to accept 'Babysitter'. 7. Home user can be pretty secure without third party real-time solutions. 'Babysitter' still requires the experienced user to solve some default deny configuration problems. [/QUOTE]

Verification