Best free HIPS right now?

The only ones i know of are Prevx1, Cyberhawk, and Processguard. I tried processguard and cyberhawk, but not extensively since i would have to invest a lot of time configuring them so I won't get compatability errors. Which is the best out of the 3? Can anyone name other free alternatives?

 

SSM.

http://www.syssafety.com/

DSA is also pretty good but does not seem to allow a lot of lee-way for correcting mistakes.

http://www.privacyware.com/dynamic_security_agent.html

 

Prosecurity

 

Spyware Terminator is pretty good.

 

Free HIPS
Set and forget
- PrevX1 : strong combines whitelist and community blacklisting with some behavorial protection (not as strong as CyberHawk)

Some pop-ups
- CyberHawk (really strong)
- When you want some outbound protection, combine it with DSA is also an easy to setup process startup monitor as a bonus you will get mail-bot protection

Strongest with pop-ups
- SSM-free has by far the most process/memory protection of all freeware HIPS (the registry module can be set yourself as a really strong registry defense)

- When you want outbound protection, use SensiveGuard (try it), It is a real pitty the developers of Sensive Guard have not made it working on all hardware configurations. It has the incredible advantage that it recognises user initiated, program initiated and programs with internet connection initiated actions. As a bonus you will get a data protection wall,
Examples
All internet programs are not allowed to create/modify/delete sensive files on your C-drive = extra defense against worms/trojans/rootkits,
All internet programs are not allowed to read your data files from your D-drive when not initiated by the user = extra defense layer on data theft (above the outbound traffic protection). Search for review SensiveGuard on this forum.

I would also use a free Sandbox (SandboxIE, BufferZone, GesWall free, ShadowPower) or better buy GesWall Pro or DefenseWall

 

Thanks for the sandbox suggestion, I'm currently trying out Sandboxie(and will probably stick with it). This is an egregious thread hijack, but at least i'm hijacking my own thread. My current security suite involves spyware blaster, AVG antispy free, Avira Antivir free, Comodo, Sandboxie, and Mozilla w/ noscript. Am I covered on all bases? I know the best solution is smart web browsing, but let's presume that I am an absolute retard. With that presumption, are all of my software selections sound? How can they be improved?

 

Ian 'Gizmo' Richards did a fairly comprehensive tests on several HIPS programs. You can view his results here. According to his tests, DefenseWall sweeped the field with a nearly perfect performance. However, I would run the trial versions of all the ones you are interested in to test their interface, usability, and compatiblity with your system. Some HIPS programs require much more user interaction than others, so you should take this into account when deciding.

 

Your software selections are indeed sound. However you apparently have no real-time spyware protection. This might not be as important since you are using Firefox w/ NoScript within sandboxie, but it would provide a more complete and thorough security setup. If you don't want to buy an real-time anti-spyware, you could go with windows defender or spyware terminator, both offer excellent protection for the price . Also, a hardware firewall always provides further protection, but if you use comodo correctly you should probably be ok. Others might recommend 'hardening' your system, but I am as of yet less familiar with this so I will not comment on it any further. And as I'm sure your aware, given that you created a thread about it, a HIPS program would round out your security setup. Almost forgot, it's always a good idea to have a backup plan, for even the best security setups are succeptible to failure.

 

Or if you are using NOD32 ver 2.70.xx, just use its built-in antispyware option and surf with Opera or Firefox, and don't bother wasting money and system resources on a separate antispyware app. In fact, antispyware apps are IMHO the least essential of all security apps normally recommended for inclusion in one's security environment..

 

I will say SSM.

SSM will be best as a classical HIPS. But still I will prefer a sandbox HIPS like DefenceWall, GesWall etc over SSM.

 

In my experience even as free both are almost useless as AS( not talking of their HIPS function).

 

I am impressed with Noeava (something) Guard. Bit of a simple interface. Trailing it right now.

 

Hi all,

I like it too as a free HIPS : very light and effective.
His author is finalizing a new UI which give to NG a really new start

MaB

 

ProcessGuard?

 

Neoava Guard

 

STSEM SAFETY MONTIR

Best of the best IMOH>

 

Any conflicts between Neoava and SensiveGuard? Seems there would be some double-duty there. Also, how stable do you feel Neoava is? I read some other threads where it seems it caused some problems, but, of course, could be user error rather than the program. Have been thinking about trying it, but wanted to make sure it was sound before doing so.

 

Monkey Feces,
Keep in mind that Neoava Guard v1.0 is a BETA software, which means not for average users, although nobody cares anymore nowadays.

 

I did not trail it on PC-1 (DW, SSM, SG, AV), but on th eone with Antivir + CyberHawk + GeSWall Pro as a replacement for CyberHawk. ErikAlbert is right I am a monkey face and it is a Beta with incompatibility with GeSWall Pro (when switching from isolated to non-isolated).

I will wait until it comes out of Beta, to replace CyberHawk. When you get NG working on your rig, it offers the best protection available. Until then (not working) I'll stick to my opinion SSM-free the best by far.

 

Thanks for the Neoava tip. I will probably try it when it comes out of beta.
Aigle,
Our security setups are nearly identical. Have you had any experience with sandboxie? If you did, is GeSwall noticeably better than Sandboxie?


TypicallyOffbeat,
Would Spyware Guard offer adequate anti malware protection?

 

No. It only provides protection against spyware, and even at that it's not really sufficient in itself. Here is a description of what SpywareGuard does. Last I heard, it wasn't being developed and updated anymore, not sure on that though.

 

Prosecurity in my opinion because developement is very very very very active.

 

My left eye is keeping close watch on ProSecurity. Some BSOD issues turned me off eifgr away bur thats been months ago now.

You all know my fierceness when it come to there HIPS so answer this Batman. Is it all all possible to run BOTH SSM and ProSecurity together, i want some actual results from your experience plz, no bluff just tough results of what you noticed when using them together if that;s possible at all.

Thanks

 

Tried ProSecurity a week ago, the free version not beta, and don't work on this computer. I downloaded it, installed it and it instantly went into reboot.

After the reboot, as soon as PS started, another reboot began. No warning, no nothing. So, PS is gone. I had to go into safe mode to get rid of it. Once it was gone, all was okay again.

And, when I downloaded it, no other HIPS type programs on this box, and I disabled the antivirus.

 

Another useful little tool for hardening: pure rules based HIPS/Blocker:

Samurai: reg tweaks and driver install blocker.
Difficult to categorise within the current HIPS apps.

http://www.turbotramp.fre3.com/