Allowlisting

What is allowlisting? Allowlisting software allows only approved processes, files and applications to run in its environment, blocking all others.

Universities, like many other organizations, may benefit significantly from the implementation of allowlisting as part of their cybersecurity strategy.

Guidance on the AnyDesk security incident; the revocation of code signing certificates suggests existing certificates should not be trusted.

For New Zealand organizations, Computer Emergency Response Team of New Zealand (CERT NZ) recognizes application allowlisting in Critical Controls framework

The auditor is a free utility developed designed to comprehensively test application allowlists for weaknesses and misconfigurations, regardless of vendor.