Frequently Asked Questions

Application Control is synonymous with application white-listing, but attempts to correct misuse of the term by the popular endpoint security tools today.  The key component to qualify as an Application Control endpoint security solutions is that is contains rules for execution which ends with a "Default Deny" rule.  This rule placement ensures that any file that can be executed that is *not* explicitly allowed is blocked- thereby eliminating the concern of self contained malware.  

Microsoft's AppLocker and Bit9 (now Carbon Black) created a feature and standalone solution respectively that were in effect the first attempts but they arguably failed because of the labor required to support, broken processes that made inadvertent blocks likely and or operational outages and missed file types for execution a regular frustrating occurrence. 

Airlock Digital started some 8 years ago with a different rule creation process and developed a comprehensive lifecycle approval approach to the broad range of files that contribute to the malware problem.

DefaultDenySec offers a range of services and the license for Airlock Digital's endpoint security solution that addresses the problem of malware but also addresses the problem of authorized or allowed applications that may have unknown weaknesses "Zero-Days" or even known weaknesses "Vulnerabilities" that are unpatched in your enterprise.