I am curious to hear the perspectives of the community members on why Bitdefender has chosen not to include application whitelisting (AWL) in GravityZone on macOS to protect against malware.
AWL is a proactive technique that implements a “default = deny” and zero-trust security model in which all applications are assumed to be untrustworthy and therefore are blocked from accessing files in designed folders on the endpoint device, unless they have been previously approved by the user or a security administrator.
Of course, the technique is not a single standalone comprehensive panacea against malware; and, a whitelisted application still needs to be monitored for malicious activity. Yet, intuitively, AWL does seem to be one additional layer of malware protection that could complement the other technologies currently included in GravityZone for macOS?
P.S.: Application Control for Business is a feature that appears to be available for Windows.
