SAP should have a feature in the the same menu where the list of trusted certificates is to disable automatic cloud lookup of the whitelist.
What am I talking about? There was a video made by a youtube user going by the name of Cruelsister1 who mostly does comodo demos, but one video they made a long time ago got me thinking.
https://www.youtube.com/watch?v=TetSy5vn7_MComodo, to allow users to mitigate the threat of accidental malware entries to their whitelist, allows their users to disable cloud lookup of files. Another way this can be made even more secure is to remove unnecessary names from the trusted vendor list to only ever allow software to run if it has a valid and verified digital signature from a company that makes things you use.
SecureAPlus should have the same feature. To disable cloud lookup of the whitelist,
but not the UAV or APEX And then the user could use the existing functions already in SAP to remove vendor names that aren't associated with software they actively use.
This way, they can still update all of the applications they actively use and install other products made by the same people, but now you have an Anti-EXE type deal that allows the user to prevent all unwanted software from being installed. Safe? malicious? unknown? Doesn't matter. Only allow software from vendors you already trust to run.
With a feature like this, unknown files would still get uploaded as that function would still be controlled by the buttons and switches that it's currently controlled by. Known malware would still get detected, because cloud lookup of the blacklists would still be happening.
