RE: Default Deny on Executables

["Sash" <swissc () blueyonder co uk>]

But who is checking the checkers, if you know what I mean?

Nice blurb on the web site (securewave.com) "Thrive without fear tomorrow".
Sh1t, its hard enough just walking outside.....

:)

-----Original Message-----
From: Kurt Seifried [mailto:listuser () seifried org] 
Sent: 14 September 2005 23:30
To: Simon B; miah () chia-pet org; dailydave () lists immunitysec com
Subject: Re: [Dailydave] Default Deny on Executables

> The OpenBSD stephanie project too, TPE & Verified Exec.
>
> http://www.innu.org/~brian/Stephanie/
>
> <plea>Abandoned project now, maybe someone here thinks it's cool
> enough to pick up </plea>
>
> S.

As well there are third party products for Windows such as SecureExe 
(everytime something runs the md5 or sha1 hash is checked against the allow 
list), looks like they renamed it to Sanctuary, at Securewave.com. This type

of thing has been available for most operating systems for several years, 
the difference being it's going to be baked in now and have (hopefully) good

management tools integrated with the rest of your security infrastructure 
(well.. maybe the next version will anyways =).

-Kurt