PDA

View Full Version : HIPS v Anti-executable


Dregg Heda
June 21st, 2009, 02:09 PM
How does the AE module in returnil differ from a full blown HIPS? Thanks.

Coldmoon
June 21st, 2009, 04:22 PM
The main difference is that it is extremely targeted towards providing protection against malware that can circumvent virtualization and as a result does not include more generalized protection features in a full blown HIPS program. This is why it may be a redundant feature for those already using HIPS.

Mike

Dregg Heda
June 22nd, 2009, 12:47 AM
Ah ic, thanks.