Your Computer Network Needs a Bouncer

Why would my computer network need a bouncer? What are you talking about?

I’m talking about a type of security software called application whitelisting. It runs on your computers and network and, just like a bouncer at a venue, only allows specific applications on an approved, vetted list to run. Everything else gets stopped at the door.

”I’ve operated without a bouncer for years — doesn’t restricting admin rights handle this?”

Limiting permissions does help keep people from accessing things they shouldn’t. But the security landscape has evolved. Hackers now write malicious software that runs without being installed and without needing admin rights — and it can still do a lot of damage. If that software does manage to run with admin rights, it’s even worse, because it can reach far more of your network than a typical user account ever could.

With application whitelisting, when any software tries to run, the bouncer checks the approved list. If it’s not on the list, it’s stopped and never runs at all.

”What if it’s legit software — will that get blocked too?”

Yes, it will. In that case we review the request for the specific software and add it to the list. We can decide whether it should run on just one computer or across all of them.

”This sounds like a pain. Do I really need it?”

There are a few very good reasons this is a service worth adding to your IT security:

• Pirated software. At one manufacturer we work with, an employee installed a pirated copy of SolidWorks, thinking it would save the company money. Instead the company received a cease-and-desist and a fine. We tracked the machine down and removed the software — but with whitelisting in place, it never would have run in the first place.
• Free / shareware. Free software is great, but it’s often unsupported and full of unpatched vulnerabilities. Some malware is even packaged as “free” backgrounds or coupon savers to trick people into installing it. Whitelisting lets us vet software before it’s installed so only legit, patched applications run on your network.
• Malware and ransomware. Ransomware encrypts your data and holds it hostage until you pay — and even if you pay, attackers may release it anyway. It often arrives through a phishing email: you click a link or attachment and it starts doing its damage. With application whitelisting installed, that software is blocked and nothing happens. According to SmallBizTrends, the average ransomware payment in 2022 was $812,360. Can you afford not to add this layer?

Application whitelisting is an important piece of a layered IT security plan. It keeps unwanted programs — the ones that could quietly damage your business — from ever running.

Want a bouncer on your network? Talk to Braintek about adding application whitelisting to your security stack.