Geswall questions

is geswall a HIPS? if so why isnt it in this comparison chart: http://wiki.castlecops.com/HIPS/IDP_programs/services

and what are the differences between the free and paid version?

 

GeSWall is a policy-based sandbox. The sandbox comparision chart is here.

Then see this thread for the differences between free and paid.

Oh and btw, GeSWall is not a firewall

 

i know its not a firewall, but it was the closest section i could find for it, since thers no HIPS section or sandbox, or maybe i just missed it

would u say a policy based sandbox is more secure or a HIPS? and defensewall is in the sandbox chart, yet it says its a HIPS? and not much info in that chart except for sandboxie and safe space

 

Sandboxes and (classic) HIPS work differently.

I dont know much to compare the two though; All I can say is that sandboxes are quieter.

 

HIPS is a broad term though generally we use it for classical anti-exe HIPS. Sandboxes are generally quiet( np pop ups oir very little pop ups) as compared to classical HIPs, easier to use and sometimes even more secure than classical HIPS.

However sandboxes usually control your vulnerable applications( for example internet applications like browsers, mail clients etc) only while classical HIPS control whole of OS.

 

but doesnt GeSWall controll ur whole OS?

 

No. None of Sandboxes( BufferZone, GesWall, DefenceWall, Sandboxie) does so.

 

Is someone stalking me?

 

so u need to configure which folder or apps that geswall will sandbox? couldnt u configure it to sandbox everything if u needed to? and isnt defensewall a sandbox, yet it says in its name that its a HIPS, so doesnt it cover ur whole system?

 

Afaik, GeSWall only sandboxes programs.

Defensewall is also a policy-based sandbox. It has a list of untrusted programs that it sandboxes; you can add a program to the untrusted list.

 

o ok, thank you for clearing that up but i still dont know why they call it defensewall HIPS, if its a sandbox?

 

Don,t be confused with it. U can just think it of Sandbox and that,s it. Name doesn,t matter.

 

Because there are four main types of HIPS are here: classical ("anomaly detection" model based), whitelist ("forbid what is not known as good"), blacklist ("forbid what is known as bad") and sandbox ("restrict rights for threat-gates applications"). They all are HIPS.