In September, Symantec made headlines by announcing a new "whitelist" approach to Windows security. Under this philosophy, only trusted files and information are allowed into a network or onto a machine, as opposed to a blacklisting approach where everything but designated untrusted information is blocked. Windows security expert Kevin Beaver discusses the implications of whitelisting and whether or not this approach is plausible.
Also in September, Microsoft is hosting their 6th annual BlueHat conference. Kevin discusses what is going to come out of BlueHat and the benefits of these meetings to Windows network admins.
Press play to begin the podcast.
0:35: Kevin discusses whitelisting versus blacklisting.
2:28: The plausibility of whitelisting for security.
4:00: What's coming out of BlueHat?
4:53: The benefits of the what's being discussed at BlueHat.
To save this "What's hot in Microsoft security podcast," play it with this URL and then save it to a disk.
About the author: Kevin Beaver is an independent information security consultant, speaker and expert witness with Atlanta-based Principle Logic LLC. He has nearly two decades of experience in IT and specializes in performing information security assessments regarding compliance and risk management. Kevin has authored/co-authored six books on information security including Hacking For Dummies and Hacking Wireless Networks For Dummies (Wiley) as well as The Practical Guide to HIPAA Privacy and Security Compliance (Auerbach). He's also the creator of the Security On Wheels information security audio programs providing security learning for IT professionals on the go. Kevin can be reached at kbeaver@principlelogic.com.