. While a virus scanner defines and blacklists what is forbidden and allows everything unknown, a whitelist defines what is used for work. Everything else cannot be started.

In this way, all malware is automatically blocked. This protection cannot be overcome by constant modifications of the malware. The verification method based on hashes makes it impossible to use cryptographic methods to generate malware that uses the hash of software that has been defined as trustworthy.