
BlackFog 4.2 offers a new feature called “execution prevention” within the settings. This option provides a new technique for preventing malware execution.
Typically, organizations and previous editions of BlackFog utilized a whitelisting approach, whereby execution of rogue malware was prevented by blocking execution in specific directories such as temporary folders or application data directories. Whilst very effective at preventing malware, the downside was that many legitimate applications often used these locations as well. Even though this is against guidelines, companies such as Google and Microsoft’s own applications sometimes used this method, meaning that when you installed a new application that used these directories you had to whitelist the files. Users found this to be invasive so we decided to develop a new approach.
We have eliminated whitelisting in favor of process monitoring and application validation. This is a behavioral technique for detecting malicious activity. The principle behind this technique is that malware often masquerades as other applications, spawns from system processes and executes in certain ways. In these scenarios we introspect all of the processes to see if they are being hijacked, replicated or simply spoofed. As with the data exfiltration rules, this is done in real-time.
Ultimately this will lead to less false positives and ensure more accurate protection than whitelisting can ever provide. In addition, this will protect execution across the entire device rather than specific directories.
Related Posts
The State of Ransomware 2025
BlackFog's state of ransomware report 2025 measures publicly disclosed and non-disclosed attacks globally.
AI and Ransomware Prevention: How Smart Tech can Outsmart Cybercriminals
What opportunities do AI ransomware protection tools offer to cybersecurity pros?
AI and Data Privacy: Protecting Personal Information
Find out what the biggest challenges related to AI and data privacy are today and what you can do to address them.
How to Prevent Ransomware Attacks: Key Practices to Know About
Are you aware of the differences between data privacy vs data security that may impact how you develop a comprehensive protection strategy
AI in Cybersecurity: Innovations, Challenges and Future Risks
AI will be the next evolution for cybersecurity solutions: What innovations and issues could this present to businesses?
AI-Powered Malware Detection: BlackFog’s Advanced Solutions
Find out everything you need to know about the importance of stopping data theft and the potential consequences of failure.