To appguard or not to appguard

Discussion in 'other anti-malware software' started by Banshee, May 30, 2012.

Thread Status:
Not open for further replies.
  1. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,011
    Or any other reliable testing companies. There's a strange absence of reliable tests for AppGuard.
     
  2. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Solarlynx

    I don't think you understand how Appguard works. You can test it yourself.

    For AV's you need testing companies, as they are looking for specific malware, and so testing reveals how a product both detects and removes that malware.

    Appguard doesn't look at whether software is good or bad, it just blocks it from certain actions. So for example it isn't supposed to allow any execution of a program on the test top. So it is easy to put a simple exe on your desktop and try and run it. If it is blocked then Appguard worked as advertised.

    It does.

    Pete
     
  3. Greg S

    Greg S Registered Member

    Joined:
    Mar 1, 2009
    Posts:
    1,039
    Location:
    A l a b a m a
    Good explanation and a reason why there is nothing for an AV testing site to test or compare. On Win 7 Pro., I've grown to love the way it works for me, Locked Down and turn all messages off. If something mis-fires, I'll take a look in event viewer.
     
  4. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,011
    So it is a HIPS?

    The question is about all types of malware trying to run on a computer. If none of all types of malware can bypass the AppGuard - then really it works as advertised. That's why I want reliable tests. Like DefenseWall - it gets 100% protection from all malware - in all known to me tests, though like the AppGuard has no detection and removal.
     
  5. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,281
    Location:
    UK
    No, it uses the concept of a trusted enclave rather than default deny which is more typical of classical HIPS. If I had to sum up the approach that AppGuard uses in a single sentence, I would say that it is one of restrict the untrusted rather than deny the unknown. For example, a browser is a known good application, but it must be untrusted and restricted accordingly because of the inherent risk of Internet-facing applications being used as an attack vector.

    http://www.prweb.com/releases/antivirus_software/zero_day_protection/prweb3989004.htm

    http://www.freepatentsonline.com/7712143.html

    I agree it would be nice to see AppGuard tested, which is why I approached MRG as they already include DefenseWall in their anti-malware tests.
     
  6. Zyrtec

    Zyrtec Registered Member

    Joined:
    Mar 4, 2008
    Posts:
    534
    Location:
    USA
    I might be mistaken but, wouldn't MRG need written permission from Blue Ridge Networks in order to test AppGuard ?
    I ask because as AV organizations, that test AVs, I guess they may need to request permission from the AV developers and, probably charge a fee to the AV company to perform the tests.

    Am I right or wrong ?



    Carlos
     
  7. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,281
    Location:
    UK
    I imagine that it would require the agreement of both parties. When I mentioned to MRG whether they would consider including AppGuard in their tests, they said no, so there didn't seem a lot of point in following it up with BRN.
     
  8. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,491
    Location:
    Canada
    exactly:thumb:
     
  9. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,011
    btw, I forgot about the Matousec 'Proactive Challenge' test - AppGuard fits there. Did anybody test the AppGuard with there suit? Sorry to speak again about the DefenseWall - this app takes 100% when you test it with their 32 bit suit (I haven't tested it but some guys did it). If the AppGuard takes 100% - then no questions about its strength.
     
  10. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,011
  11. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,281
    Location:
    UK
    Hi Solarlynx,

    That was version 1.4.7 before the addition of MemoryGuard. It's likely that the current version 3.4.2 has a protection level that is close to 100% in the high and lockdown modes, but without independent testing by a respected anti-malware testing lab it's all very subjective. I don't know of any reported bypasses though by Wilders members who have carried out their own private testing.

    Kind regards
     
  12. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,011
    That's good.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.