安全新兵营第十九天：软件控制

InfoWorld Security Boot Camp: Day 19: Control user installs of software

October 15, 2009

YOUR ASSIGNMENT TODAY: Letting users execute and install their own software will always allow viruses, worms, and Trojans to be successfully installed.

WHY DO IT: In any large security system, especially one that covers a large enterprise or coast-to-coast implementation, the worst attackers are usually trusted insiders.

HOW TO DO IT:Automate the process: install client-side software examining the program's or content's entire binary and making an intelligent, informed decision before the content is executed or loaded.

RECOMMENDED READING: "Control your users' software installs," Infoworld.com