Danksagungen0

Improved HIPS

Gepostet: 2010-05-26 | 10:23 · 4 Antworten · · Übersetzung:

Norton's Firewall already includes HIPS, but it can be improved. For example, it can always allow automatically Norton trusted programs. It would also be great if we can customize what to ask for.

Labels: New Feature

Antworten

Danksagungen0

Re: Improved HIPS

Gepostet: 2010-05-28 | 04:31 · Permanenter Link

Danksagungen0

Re: Improved HIPS

Gepostet: 2010-05-28 | 06:34 · Permanenter Link

I think maybe you can try to make HIPS can block all of the leaktest sample here.

http://www.matousec.com/projects/proactive-security-challenge/results.php

I hope NIS 2011 can get good scores.

Their sample download:

http://www.matousec.com/downloads/

Danksagungen0

Re: Improved HIPS

Gepostet: 2010-05-28 | 09:18 · Permanenter Link

SONAR is tied with the Firewall. SONAR uses various events and information including Insight to make a decision on whether a process is good and should be allowed to access the Internet. So, if I understand what you are describing correctly, this is already in the product.
Danksagungen0

Re: Improved HIPS

Gepostet: 2010-05-28 | 09:23 · Permanenter Link

No, I'm not talking about the internet (I know how Norton controls these events). I was talking about advanced events such as active desktop usage, code injection etc. It will also be a great option to setup Norton to ask only for files that are not Norton Trusted.