| Behaviour Blocker versus HIPS What is the difference between a Behaviour Blocker and a HIPS.
Thanks,
MSE_fan |
|
|
|
Reviews:
 ·WestNet Broadband
| »www.google.com/search?q=What+is+···ie=UTF-8
Homework?
What specifics are you asking?
--
The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke
|
|
| I am a little bit confused: I tought that a HIPS is totaly different than a Behaviour Blocker but Emsi Soft (they have Mamutu) said that their Behaviour Blocker is in fact a HIPS. |
|
Reviews:
·WestNet Broadband
2 edits | |
|
 planet
join:2001-11-05
Oz
kudos:1 | My simplistic explanation would be for example a program such as ThreatFire (behavior blocker) which would monitor for code that might be malware related (heuristic) versus a program like Faronics Anti-Executable (HIPS) which prevents all non-white listed exe and dll files from running on your PC without your permission. |
|
| reply to MSE_fan
(H)IPS is a wellknown and accepted terminology in IT.
Behavior blocker... not so much. Or at least I've never come across it before.
Got a link to this Mamutu software?
Regards |
|
| »www.mamutu.com/en/software/mamutu/ |
|
| reply to MSE_fan
I think a HIPS pretty much reports on everything that happens while a behavior blocker looks for patterns.
--
If we quit voting, will they all just go away? |
|
| reply to MSE_fan
quote:
»www.mamutu.com/en/software/ids/
In addition, the Behavior Blocker can monitor and stop any of the following actions:
Installation of new drivers and services
Any kind of process manipulation like DLL-injection, code-injection, patching, termination, etc.
Installation of new BHOs (Browser Helper Objects)
Changes to your Internet Explorer configuration
Hidden installations of software
Changes to your Hosts file (redirects domains)
Installations of debuggers on the system
So in a very BROAD sense, you could argue this is a HIPS in that it resides on and protects on an endhost,
but truth to tell it's all semantics to me. If you are security conscious, keep in mind the following truisms :
a) security is a PROCESS not a product
b) if it can be made by human hands, it can be broken by human hands
c) security is best designed and done in multiple (decoupled) layers
My 00000010bits.
Regards |
|
