Cyber Security
Zero Trust Security
Preventing Attacks
The ThreatLocker Security Solution
ThreatLocker has a unique way in playing its role in the fight against Cyber Crime helping businesses to ringfence against malicious and misused programs.
Traditional Security
Every computer file has a unique thumbprint or signature by which it can be identified, this thumbprint or checksum, to give it its proper name, allows security applications like traditional anti-virus software to compare the thumbprint against a known database of malicious programs, if the program is on the list then it gets blocked and all is good in the world.
As the authors of malicious programs became more prolific and the technology to produce malicious code became more accessible it becomes almost impossible to keep the database current. This is what we refer to when we talk about Zero day or even Zero Hour attacks. Malicious programs that are too new to be identified.
As Zero Day reduced the effectiveness of traditional detection methods the manufacturers were forced to add additional detection methods such as observing the behaviour of the application in a sterile environment, what we call sandboxing, Vector Analysis determining whether the program tries to communicate with a known criminal website .
In truth the race between the good guys and the bad guys continues to be closely run but could there be another way.
The Alternative
What if, rather than trying to prove what is good and what is bad, we assumed that everything was potentially bad, in other words trusting nothing or Zero Trust In this scenario only a determined library of known and trusted applications would be allowed to run and if they were not on the trusted list then they would be blocked. As new applications were added or existing applications were updated they would simply be added to the database of trusted applications , often referred to as a white list.
- Introducing Ringfencing
- Allowlisting
- Storage Control
- Elevations Control
- Network Access Control
If you'd like to learn more, submit your details here:
Data Theft
It is important to know what is happening on your data storage devices at all times. Without you in the know, you risk these devices being left wide open to a cyber attack. ThreatLocker not only lets you track and control external data access (e.g., via the internet) but internal access as well. When your security team has complete visibility over your data storage, they will be able to block data theft before it happens.
Control Physical Copying: With the right ThreatLocker Storage Control policies in place, a bad actor on your premises with a USB drive won’t be able to copy a thing.
Monitor Access: See who is accessing your files and when with detailed reports generated in real time by ThreatLocker.
Restrict Applications: Let only trusted apps access your data, as determined by your custom policies.
Malware
Ransomware and other malicious software can copy or encrypt your files in a few minutes. ThreatLocker uses a more logical approach to stop viruses and malware from affecting your business. ThreatLocker Application Control uses a combination of Default Deny and Ringfencing to protect your business from known and unknown malware threats.
Zero-Day Attacks: ThreatLocker protects against vulnerabilities that haven’t even been discovered yet.
Macro Viruses: Malware embedded in trusted programs like Office can’t overcome ThreatLocker’s Ringfencing.
Fileless Malware: Even malware that hides in memory can’t sneak in; if its code isn’t on the trusted list, it isn’t getting access.
Ransomware: Ringfencing lets you dictate how apps interact with data; if a program, ANY program, tries to encrypt data it isn’t authorized to, it will be blocked.
Remote Access Attacks
Remote access to your systems for outside users and partners is vital for today’s businesses, but it’s also a fertile avenue of attack for cybercriminals. ThreatLocker sees to it that even authorised visitors to your servers and systems can’t deliberately or unintentionally let malware in.
Per User Limits: Eliminate the need to grant blanket access as ThreatLocker creates policies for organisations or unique users.
Protect Remote Assets: ThreatLocker is fully compatible with remote desktops and Citrix servers so employees can work securely from anywhere.
Control of Unknown Apps: ThreatLocker unobtrusively controls the applications of trusted visitors to prevent cybercriminals piggybacking in.
IT Disputes
With remote working on the rise, and the need for employees to be able to work anywhere, anytime, the need to track their computer activities is becoming increasingly important. ThreatLocker enables you to have visibility and control over the files and applications users are accessing on a day-to-day basis. With ThreatLocker you can:
Track File Access: Get detailed, real-time reports on who accessed data and what they did with it.
Track Changes and Deletions: Thorough records for any file type let you see the complete history of your data.
Block Unauthorized Apps: ThreatLocker’s custom policies let you block any apps you want, regardless of if they are malware or not.
