PDA

View Full Version : Signature security V virtualisation (sandbox)


Franklin
January 21st, 2006, 08:53 AM
IMHO virtualisation (hips) security affords better protection than signature based security apps.

What are your thoughts?:)

kareldjag
January 21st, 2006, 01:17 PM
Hi,

I'm not a signature file database protection partisan, but a good antivirus can really be helpfull in some cases.
What will happen if someone boot your computer from a floppy disk with a boot virus like the example of the attached image?:

HIPS (except Viguard) will not be helful in this case.

Then it's better to combine scanners with HIPS based anomaly detection and HIPS based white list with sandbox technology.

Regards

Infinity
January 21st, 2006, 02:18 PM
Thanx Kareldjag, encore il y a des examples ...

merci!