ohuohuo wrote:
Thank you! but how do you protect your mac system?
Your Mac has built in protection. https://www.apple.com/macos/security/
Apple uses its Software Update service (which also drives the system software updates that show in the App Store) as a mechanism for installing “background and critical” updates that are installed silently in the background with no notifications to the user.
The macOS uses these to combat malware:
Gatekeeper mechanism, central to security services, which tries to ensure that any code loaded is ‘safe’. Code signatures are only part of this.
XProtect checks the security and integrity of files, including in broader ways too, vulnerable document types, such as JPEG images, are also screened to ensure that they’re not malicious.
Apple’s Malware Removal Tool (MRT) an app which often complements XProtect’s signature-based screening, and can automatically remove all traces of many different species of malware.
System Integrity Protection (SIP) which ensures that nothing can tamper with key system files, or even Apple’s bundled apps.
The new Catalina also continues to make improvements:
About the read-only system volume in macOS Catalina
You can ref John Galt: Effective defenses against malware and other threats
https://discussions.apple.com/docs/DOC-8841
recent—
https://i.blackhat.com/USA-19/Thursday/us-19-Krstic-Behind-The-Scenes-Of-IOS-And-Mas-Security.pdf