What is the best HIPS out there ?

I use DefenseWall HIPS, because it has no annoying quiz questions, like yes, no, allow, block, query, execute, abort, ... I'm tired of these questions. Anti-Executable is almost the same like DW, it always says NO, period.

If the software needs my help, it means that it can't do its job by itself. Only retard softwares act like that.

 

System Safety Monitor

Also EQSecure is showing promise as it continues thru developments.

 

Which one is the most not userfriendly one ?

 

Hello!

My vote goes to Online Armor. It is easy to use and works nicely on my machine! It supports KIS 7 nicely!

Kristian

 

Hey Erik, do you have a list of Software that doesn't require any help, my wife would be interested.

 

Neither.

If you station yourself in front of your PC long enough to overview and read the manual, BOTH are very user-friendly and also quite a SHIELD!!!

 

Re: What is the best HIPS out there?

just wanted to mention winpooch.
it's free, open-souce, lightweight and "portable" (i.e. runs w/o installation).
I'm not a hips expert but this little program looks promising to me.

 

I happen to like ProSecurity. It can be set to scan a clean system and then not bother you hardly at all after that. The others are much more annoying and difficult to deal with.

 

Hi all,

What you like is called learning mode in most HIPS

Regards,

MaB

 

PS has it's "learning mode" as well, which I turn off after the first reboot. What I'm saying is that I can have PS scan my HD and since I tell it my system is "clean" (just reformatted), then it flags everything in the Win and Program Files directories as "trusted", which is fine. So after that, PS doesn't bother me at all, or if it does, extremely rarely. Learning mode is off also. Now the good thing is, anything new that comes up or tries to execute or whatever, I'll get an alert, which is exacty what I want. In other HIPS's, if you leave learning mode on for a few days or a week, then you're vulnerable to anything that may happen during that period. PS I can turn that off right after the initial HD scan that marks everything trusted. That's what I like about it.

 

Hi all,

Sorry Kerodo, i did not understand what you was meaning and i can tell you that Neoava Guard works in the same way ( Scann + learning mode ) and Online Armor scans too but without a learning mode

 

No problem at all...

The others sound interesting too..

 

Online Armor was going to get a learning mode, but Mike knows more about that and if it will get added.

dja2k

 

If criteria for "the best" are the features/scope of protection, then I'd say ProSecurity is #1. But what the heck is going on with that GUI? They can't be serious about it, it's one of the ugliest I've ever seen. Really. I often thought about replacing my SSM with ProSecurity, but in the end I always say "no, I can't put that abomination on my system".
Seriously - it is an excellent piece of software, and in active development also. I'll most probably buy a license for PS very soon. I will also buy a pair of sunglasses, just to ease the pain that GUI is giving me.
My sincere apologies to developers.

 

Well can't say which is best sence I have not used them all.
Using SSM now and liking it very much.

 

Hmmm.. But it seems as if ProSecurity's leaktests according to matousec is not as strong as SSM?

 

Apparently so.
http://www.matousec.com/projects/windows-personal-firewall-analysis/leak-tests-results.php

 

WindBlade & LoneWolf,

Hi.
Matousec, you say? Ah yes, the eternal judge. But the link provided by LoneWolf shows results of leaktests. AFAIK, they test protection against techniques used to send the data out. A HIPS app does more than that. Please correct me if I'm wrong here. I was actually looking at this HIPS comparison table.
Nevertheless, I stand corrected, it was rather stupid of me to pronounce anything as "#1". The thread title is wrong.

Cheers.

 

Yes about that table....

 

i will say again DefenSeWall Hips and ProcessGuard

 

ThreatFire slowed down my PC boot and load time wayyyyyyyy too much.

 

After you find the best 5 or 6 HIPS it becomes a matter taste, compatibility with other software, and compatibility with and complement to other security programs. I found that in Online Armor. It works with Sandboxie (has paid and free), NOD2, and SpywareBlaster without any problems. My main machine is ancient AMD Athlon 1.2 Ghz and 768 MB ram XP Pro SP3. The only other software with global influence on performance I have are PGP Desktop and MozyHome. I do not get a visible hit on performance. It can be measured with diagnostics but it is small.

 

Drive Sentry and Defense+

 

The best HIPS is the one that is the best match to your security policy. On my PCs, that policy is default-deny and SSM is a perfect fit.

 

EQSecure w/ Alcyon's Rulesets and i might add, consistently updated for many months and still being released!

I couple EQS with ProcessGuard for that one-two punch complimented with Mamutu Behavioral Blocker that seals the deal full circle.

Use Firefox Portable or another good browser and your safe as a bug in the rug. LOL