
There are additional protections, particularly on a Mac with Apple silicon, to limit the potential damage of malware that does manage to execute. These protections, further described below, combine to support best-practice protection from viruses and malware. XProtect adds to this defense, along with Gatekeeper and Notarization.įinally, XProtect acts to remediate malware that has managed to successfully execute. The next layer of defense is to help ensure that if malware appears on any Mac, it’s quickly identified and blocked, both to halt spread and to remediate the Mac systems it’s already gained a foothold on. The first layer of defense is designed to inhibit the distribution of malware, and prevent it from launching even once-this is the goal of the App Store, and Gatekeeper combined with Notarization.


Remediate malware that has executed: XProtect Block malware from running on customer systems: Gatekeeper, Notarization, and XProtectģ. Prevent launch or execution of malware: App Store, or Gatekeeper combined with NotarizationĢ. Malware defenses are structured in three layers:ġ.


recoveryOS and diagnostics environments.Contents of a LocalPolicy file for a Mac with Apple silicon.LocalPolicy signing-key creation and management.Boot process for iOS and iPadOS devices.Secure intent and connections to the Secure Enclave.Face ID, Touch ID, passcodes, and passwords.
