Microsoft Is Not Trying to Block Access Says Kaspersky

ronjor · Oct 7, 2006

PARIS (Reuters)—Microsoft's new operating system Vista will not make it more difficult for anti-virus systems to work, Russian computer security group and potential IPO candidate Kaspersky Lab said on Friday, contradicting rivals.
Click to expand...

Article

ronjor · Oct 21, 2006

Sophos: Microsoft Doesn't Need to Open Up PatchGuard

In an interview with BetaNews on Friday afternoon, Sophos senior security analyst Ron O'Brien suggested that, even though his company plans to participate with Microsoft's program to build a security services API for Windows Vista SP1 -- and perhaps because of that fact -- Microsoft does not need to create a bypass mechanism for its upcoming PatchGuard kernel lockdown service, as other vendors have recently insisted.
Click to expand...

Article

Rasheed187 · Oct 21, 2006

This all is getting a bit confusing, but at the end of the day I want my HIPS to have full control over the OS, because I wouldn´t be surprised if hackers will find a way to bypass PatchGuard.

Chubb · Oct 21, 2006

ronjor said:

Sophos: Microsoft Doesn't Need to Open Up PatchGuard
Article
Click to expand...

A paragraph on an article from Sophos' web site:

Sophos: 20 years of security innovation

Advancing protection beyond the known – Zero Day and HIPS

This constant acceleration and diversification of the threat has lead to a growing need to detect and stop unknown threats. Terms like Zero Day and HIPS suggest that these new threats require standalone protection systems. Typical HIPS systems modify the OS kernel at multiple points in an attempt to track behavior in real-time and stop it before too much damage occurs. This approach risks compromising the stability and security of the very OS it's trying to secure, and can only detect malicious behavior after the event.

Sophos has avoided these dangers by addressing the unknown threat risk through extensions to our core expertise. Genotype and Behavioral Genotype Protection are unique pre-emptive technologies, identifying malicious behaviour before any execution can occur, without the need for kernel modification.

Behavioral Genotype Protection is now an integral part of all versions of Sophos Anti-Virus, PureMessage on all platforms and the Sophos Email Security Appliance, ensuring all layers of the corporate network are protected. Malicious code is prevented from executing at all, whereas runtime HIPS can only interrupt code that has already partly executed.
Click to expand...

Defenestration · Oct 22, 2006

Rasheed187 said:

This all is getting a bit confusing, but at the end of the day I want my HIPS to have full control over the OS, because I wouldn´t be surprised if hackers will find a way to bypass PatchGuard.
Click to expand...

Already been hacked about a year ago

https://www.wilderssecurity.com/showthread.php?t=107864

https://www.wilderssecurity.com/showthread.php?t=124580

Chubb · Oct 23, 2006

Symantec and McAfee should have prepared better for Microsoft Windows Vista - Sophos comment

http://www.sophos.com/pressoffice/n...ins.html?pl_id=9&lang_id=1&lp_keyword=vistasa

Log in or Sign up

Microsoft Is Not Trying to Block Access Says Kaspersky

ronjor Global Moderator

ronjor Global Moderator

Rasheed187 Registered Member

Chubb Registered Member

Defenestration Registered Member

Chubb Registered Member

Log in or Sign up

Microsoft Is Not Trying to Block Access Says Kaspersky

ronjor Global Moderator

ronjor Global Moderator

Rasheed187 Registered Member

Chubb Registered Member

Defenestration Registered Member

Chubb Registered Member

Useful Searches