Does whitelisting kill AV?
Posted by Kate Munro on Tue, Jul 22, 2008
This was a particularly well thought out blog post from Threat Fire on whether whitelists will kill AV or work with them. It is a response to CNET writer Robert Vamosi's article Defense in Depth column on whitelisting that quotes Bit9 CEO Patrick Morley. The Threat Fire writer talks about AV and whitelisting working together, with AV eventually - in the future - becoming commoditized (JAMPoJ if you like silly jargon). When the writer talks about the whitelisting solutions sitting beside the "more exposed" whitelisting ones, I take it to mean that whitelisting will be the first line of defense at the endpoint - stopping malware and unauthorized software from running. In terms of when this will happen, there is the ideal and then there is the real. When it comes to innovative technology like whitelisting, it will not be a wholesale change, but a more gradual one as the Threat Fire writer said.