A different Approach for anti-virus . Am I going in the right direction?
<p>I'm currently conceiving a system that works like an anti-virus, but also uses the White Listing i.e </p>

<p>Preventing Viruses from Running by having a database of Known legitimate Programs</p>

<p>Yes , there is the Windows UAC, but still many viruses "work around" it. I'm planning on a more reliable system.</p>

<p>My system has also a database of known threats (cryptographic hash). </p>

<p>Is this approach viable,</p>

<p><strong>What are the possible loop holes in this approach</strong></p>

<p>I understand that there has been a lot of attempts at this. But still I want to try it out.</p>

<p>I'm planning to use C# and .Net for a prototype  may be i'll move on to C++ for performance later</p>

<p>Update:
Thank you all for your time and thoughts.
I decided to do some more research in this area before actually designing something
Espcially as  pointd out below the Zeroday threat problem</p>
