Hips or Behaviour blockers?

Re: Hips or Behabiour blockers?

Yes! Of course BB is smarter than HIPS.
Why? because BB has its brains either collective intelligence thru cloud computing or some technology on the other hand HIPS don't have brains it relies on the user's intelligence

 

that was very clearly explain

 

Re: Hips or Behabiour blockers?

Please identify behavior blockers that are using cloud.

 

I would chooses a HIPS over behavior blockers any day. If you think about this Logically behavior blockers only block certain types of behaviors that the vendor
thinks should be blocked. In other words behavior blockers wouldn't block every type of Bad behavior. Think of it like an anti virus program its only as good as its Black list data base.

 

Re: Hips or Behabiour blockers?

threatfire and mamutu or maybe ClamAV-Immunet?
I think they gather intelligence from its userbase like a cloud av does?

 

Yeah, Threatfire is a cloud based behaviour blocker. Too bad it's not coded in a x64 version.

 

You talk correct. Sad no one listen.

 

A HIPS is only as good as the user in front of the monitor.
BB's are the same, but with less chance of the user making a mistake.
I personally prefer a good BB (Mamutu comes to mind) over a good HIPS (Defense+ comes to mind) anyday, but it all boils down to personal preference.

 

Traditional hips for me

 

mike thanks

 

BBlockers are smart comunty base antimalware and when crunk it up to high levels it will be similare to hips but smarter
hips are user base the smart one here has to be you and me and no comunity base promps do you guys think of a user mistake by using hips or no comunity rating at all from a particular malware that can and the end hurt the user any ideas?thanks,it is hard to decide cause one can even block/lock a own pc with a hips or a bypassed with a BB

 

If you count a Policy Based Sandbox (Defensewall) as a HIPS I would pick that.

 

Mamutu is a good BB. Threatfire is another good one.

Threatfire is potentially much more powerful than merely a set of behavioral threshholds augmented by a community-enhanced set of black/white lists. Reason: TF has a very flexible "Advanced" capability for the user to add his own rules. Thus (for example) the user can add the excellent registry & file protection rules posted by Kees1958 in another thread.

Moreover, TF can function as a basic monitor over outgoing connections. Accordingly, if the user has an SPI-capable router, then -- over & above TF's BB capabilities -- it can also supplant the need for a software firewall.

 

Actually, I do.

http://www.softsphere.com/

Which is also my choice at the moment.

 

yes agree

 

What don't you make a poll, to see what members prefer?

 

I would choose HIPS rather than BB coz as explained by arran and what his signatures says "Command and Control"

I can fully control HIPS software and use it as per my requirements

 

https://www.wilderssecurity.com/showthread.php?t=272562

 

I think the same. HIPS are more safe and powerful.

 

guys what about if i used both hips+BB?what do you think?

 

Now your talking! Yeah add Emsisoft 5 with OA premium. Emsisoft has the BB and OA has the HIPS. Or you could use threatfire set to 5 and outpost pro with its HIPS. THe choices are endless really.

 

cool idea thanks

 

+1 TRUEEE

 

Not a good idea. Not only is there a possibility of conflict, but the setup is completely redundant and will cause slowdowns. BB will do nothing when paired with a HIPS besides compensate for misconfigured rules. Take the time to configure your HIPS properly and there is no need for a BB.

BB is simply a HIPS for those lacking the knowledge to answer alerts correctly. I would hope none here would run two HIPS simultaneously on a machine they actually wanted to use.

 

yes agree with you