ie8 fix
madison

Zero Day

Ryan Naraine, Emil Protalinski and Dancho Danchev

Apple pushes 'Gatekeeper' to protect Mac OS X from malware attacks

By | February 16, 2012, 11:41am PST

Summary: The new anti-malware feature works behind the scenes to let Mac users either allow or deny application downloads based on where they come from.

Apple has built a ‘Gatekeeper’ to help protect Mac OS X users from downloading and running malicious software.

The new anti-malware feature, now fitted into the new OSX Mountain Lion, works behind the scenes to let Mac users either allow or deny application downloads based on where they come from.follow Ryan Naraine on twitter

In the “Security and Privacy” preference, the end user gets the choice over whether to allow applications downloaded from:

  • Mac App Store
  • Mac App Store and identified developers
  • Anywhere

The pre-checked default is the “Mac App Store and identified” developers, a setting that works in tandem with Apple’s new Developer ID Program.

As part of the Mac Developer Program, Apple gives developers a unique Developer ID for signing their apps. A developer’s digital signature allows Gatekeeper to verify that their app is not known malware and that it hasn’t been tampered with. If an app doesn’t have a Developer ID associated with it, Gatekeeper can let you know before you install it.

More on Gatekeeper from Apple Insider and Daring Fireball.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues.

Disclosure

Ryan Naraine

The most important disclosure is of my employment with Kaspersky Lab as a member of the global research and analysis team. Kaspersky Lab is a global company specializing in anti-malware and secure content management technologies. I do not own stocks or other investments in any technology company.

Biography

Ryan Naraine

Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues. He is currently security evangelist at Kaspersky Lab, an anti-malware company with operations around the globe. He is taking a leadership role in developing the company's online community initiative around secure content management technologies.

Prior to joining Kaspersky Lab, Ryan was Editor-at-Large/Security at eWEEK, leading the magazine's and Web site's coverage of Internet and computer security issues and managing the popular SecurityWatch blog, covering the daily threats, vulnerabilities and IT security technologies. He also covered IT security, hacker attacks and secure content management topics for Jupiter Media's internetnetnews.com.

Ryan can be reached at naraine SHIFT 2 gmail.com. For daily updates on Ryan's activities, follow him on Twitter.

20
Comments

Join the conversation!

Just In

Is it a Gatekeeper or an AppStoreKeeper?
fjpoblam Updated - 17th Feb
How much is the motivation noble-minded and how much is money-minded? (Certification for sale: which devs are in YOUR wallet?)
you know where this is headed right?
0 Votes
+ -
[nt]
@bstringy

Waiting for the nuts to come out of the woodwork.

But let me be the first to say that I hope Apple will not take the iOS approach and allow me to install any applications I want on my system. Its ok to warn me but let me make the decision.
@gribittmep Then you want to click the radio button next to the word "Anywhere"
0 Votes
+ -
for windows ( we have a workable solution for other unixes ).

This is the most sensible addition to any OS. Being able to restrict software is the most effect malware tool available, short of fixing all bugs.

Malware detectors are useless (well except for subscription revenue).

update: Restricting API's to App Store sourced apps, also in Mountain Lion, is more likely to impact consumer choice than gatekeeper.
0 Votes
+ -
But what about bypassing it!
OhTheHumanity 16th Feb
Someone will come up with a way to hack around this feature, so it just adds another layer, which is good, but not going to stop it all!
@OhTheHumanity You can never stop it all ... cough .... excuse me, you actually can stop it all by formatting your HDD and shutting down your computer.
Good to know that but i think it will not stop. they tend to do the same thing always
Sounds a bit like UAC in windows
@Jaytmoon

But Apples never get viruses, Spyware or malware/ At least that's what they say.
@jblazsek@... : I guess they never head of MacDefender and its variants. happy
But their ios is perfect - why would they need this?
@dagodevas : NO idea. Maybe Apple ran out of new features. It is a "perfect" iOS as you said.
Oh and Microsoft calls the Microsoft Security Essentials, gee apple if finally showing some of the truths behind security issues with any computer
@bsmi021@... : Actually there is a difference. MSE will hopefully detect and clean malware and viruses. Gatekeeper looks like a switch. Allow or not. Doesn't even look like it will check for malware.
But why? Mac OSX is completely invulnerable to any sort of attack - I keep being told so by Apple Geniuses and the frothing at the mouth Apple fanzealots on here. So this must be some sort of lie by Microsoft.../sarcasm
@Pete "athynz" Athens : Shhhhh. Not Microsoft but Google. happy
0 Votes
+ -
A thought
Gisabun 17th Feb
Is this actually a malware detector? To me it doesn't. More like an on/off switch controlled by the user [and that's not usually good].
MSE at least makes an effort to detect and clean malware
0 Votes
+ -
Is it a Gatekeeper or an AppStoreKeeper?
fjpoblam Updated - 17th Feb
How much is the motivation noble-minded and how much is money-minded? (Certification for sale: which devs are in YOUR wallet?)

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix