Application specific learning

[Melf]

Many security products come with learning mode these days, which is intended to make sure all your existing apps are allowed to do their thing. I don't like the thought of running this every time I add a new program though, because who knows what is lurking around waiting to get privileges made for itself.

It would suit me much better to enable learning mode briefly for each new thing I install, NOT for the entire OS. Wondering if anyone has seen any security software with "selective" learning?

[Cudni]

Not sure if there is any that allows learning mode just for one app. I find that rarely the learning mode needs invoking as the security apps now so much already about the apps running anyway

[Melf]

The thing is, I think that security apps are quite poor at keeping up with what even commonly used apps should be allowed to do. For example see this thread I made re: SpyShelter, which despite numerous popups could not both stop Excel from logging keys from my browser, and actually allow me to type in Excel :S

I think that learning mode would be a really good way to get rid of popups while also not compromosing protection.

[Ranget]

well all of the programs these day don't have an AI
nor the AI program are advance enough to decide whether this action is harmful
or not

so till we can create an intellgence software product that will take over the world "skynet "

you won't be able to do that

Learning mode is good on Fresh setup just to minimize the popups
everything else you have to decide manually

[Melf]

The idea isn't for the program to decide what's harmful. The idea is for the program to learn what's allowed through normal use. It's exactly the same as the learning mode that we already see in many products today, but it would only apply to one application at a time.

There is software that can do exactly what you want... Unfortunately almost all of it is limited to Linux or UNIX (e.g. AppArmor, Tomoyo). The only software like that for Windows that I know of is Geswall, which IIRC is dead in the water.

It's really quite sad... Windows even now is not where UNIX has been for almost 10 years.

[Melf]

I didn't know that Geswall can do that, that is neat-o.

Oh well, I can still dream. eg I have been harrassing the developer of Tiny Wall firewall here on the forums to include such a feature in his program