Does Process Guard protect my server?

Discussion in 'ProcessGuard' started by nameless, Jan 28, 2004.

Thread Status:
Not open for further replies.
  1. nameless

    nameless Registered Member

    Joined:
    Feb 23, 2003
    Posts:
    1,184
    I run the Apache HTTP server on my WinXP system, and I am also running Process Guard 1.200. I have apache.exe in PG's list, with all the default "block" items selected--including "write". Does this necessarily protect Apache against a potential future buffer overrun attack?
     
  2. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    Excellent question!

    Will it protect IIS?

    Will it protect "Office"-like programs?

    Windows2000 Server? (Or whatever it is).

    I wondering about all that stuff tonight at work myself - I just don't have the knowledge to know whether PG would help any of those kinds of programs or not.

    Anyone? Pete
     
  3. Jason_DiamondCS

    Jason_DiamondCS Former DCS Moderator

    Joined:
    Nov 11, 2002
    Posts:
    1,046
    Location:
    Perth, Western Australia
    No, buffer overflow attacks usually occur from within the process, ie, it is caused by a bug in Apache allowing the overflow to occur. Process Guard allows a process it protects to do anything it likes to itself.

    The only thing which can protect against overflows currently is an AMD Athlon 64/Opteron CPU combined with Windows XP SP2 (currently in BETA but it is available). It is a hardware/operating system issue that cannot be fixed in software without making your system unresponsive.

    -Jason-
     
  4. Jason_DiamondCS

    Jason_DiamondCS Former DCS Moderator

    Joined:
    Nov 11, 2002
    Posts:
    1,046
    Location:
    Perth, Western Australia
    Process Guard protects applications from attack by other processes (ie Malware), so yes, it can protect any application you like.

    -Jason-
     
Thread Status:
Not open for further replies.