Linkscanner Lite - worth a punt?

Hello rogert,

Are signatures(blacklist) the "primary" means that LinkScanner Pro detects and blocks exploits? Does LSP employ behavioral heuristics in detecting/blocking exploits? If so, does it take a greater or lesser role than signatures in detecting/blocking exploits? Thanks in advance.


Peace & Love,

CogitoErgoSum

 

Don't know if this link may be of assistance?

http://www.explabs.com/products/lspro_methodology.asp

 

Hello Baldrick,

FYI, I have already read all the information available at the Exploit Prevention Lab's web site regarding LinkScanner Pro a long time ago. I just wanted to get an official response from the horse's mouth. The reason that I asked the questions that I did is because of the following link below.

http://community.hautesecure.com/forums/p/37/153.aspx

Anyhow, thanks for your efforts.


Peace & Love,

CogitoErgoSum

 

Hi Cogito

Interesting article...seems to lightly pan LS's approach when compared with its own. Had a snoop around and found this blog that seems to reveal more about the way that HauteSecure works...which does not seem to be far away from LS's...so I guess that there is not much to choose between them.

http://msmvps.com/blogs/spywaresucks/archive/2007/06/26/990604.aspx

More and more interesting.

 

Hi Cogito,

We actually use a combination of things... static sigs _and_ heuristics mostly, combined with URL/ IP blacklists for the times when a sig or heuristic just won't do.

Our intention moving forward is to rely less and less on URL/ IP blocking, and more on relatime detection/ analysis.

Roger

 

Heh... except that, just like with scanners, some products work better than others in practise. Ouch ... now I have to say three nice things.



Roger

 

Roger,

I am wondering if think running Haute Secure And Linkscanner Pro side by side would be overkill?

 

Hi SM,

Best security tends to be layered, so probably not, but I've not tried the two of them , so really ... I don't know if they work together.

I'll see if I can get time over the next days to try.

Cheers

Roger

 

Hello rogert,

Thanks for the follow-up.


Peace & Love,

CogitoErgoSum

 

Roger,

I am wondering if the heuristics are built into the appliction or are they present on the backend scanning that is done?

SMPRICESOLUTIONS

 

I have been using LS Lite for a couple of days. I am running it with SiteAdvisor, and find that I like LS better.

I also have KIS 7 and other applications shown in my signature.
Does LS Pro conflict with KIS?

Thanks,
Jerry