Information Security Management Handbook, Volume 6, 6th Edition

Chapter 15

Application Whitelisting

Georges J. Jahchan

Last year (2010) has seen the proliferation of some high-profile pieces of malware that targeted attacks aimed at specific organizations and were initiated for a specific purpose that varies from sabotaging industrial machinery (reportedly, uranium enrichment centrifuges in Iran) to wide-scale industrial espionage.

By several security experts’ accounts, StuxNet is by far the most sophisticated piece of malware ever launched, targeting what was at the time four as yet undisclosed vulnerabilities ...