What is your security without realtime Anti Virus setup?

Mine is in my sig, just curious about others. What is the back bone of your naked setup? Mine is the OS, what is yours: virtualisation, sandboxing, HIPS, anti-executable or a combo?

 

The backbone would be the kernel. Apparmor sandboxing, hardened Chroot jails, PAX/Grsecurity, file/folder permissions.

Primarily it's about removing privileges from everything on the system.

 

Very good question.
My personal answer is, and has been for some time, Sandboxie.

I'm always installing different products out of curiosity (with an image backup just in case) but the backbone, as you well put it, will always be Sandboxie.

 

At the moment Sandboxie and Mamutu. It doesn't seem to matter what I put with Sandboxie, nothing ever gets by. My main vulnerability is lots of downloading mainly for games, so the download folder is sandboxed where things sit until they get an on-demand scan.

 

@ Hungry man

I would expect some SELinux and AppArmor enthousiasts.

I did not know AppArmor is now part of Ubuntu distro now and has a learning mode. So Ubuntu power users have their own build in HIPS based on access policy control.

@Justenough

I have ran a simular setup in the pas on XP with ThreatFire and DefenseWall (also setting download directory as untrusted within DW)

 

Just DefenseWall Personal Firewall .

 

Mine is in my signature.

Backbone would be: HIPS-Sandbox-Imaging.

 

Yes, Apparmor profiles come with Ubuntu and the AppArmor module is in the Vanilla Linux kernel.

Learning mode makes it incredibly easy to use. Any program or service can be run at absolute least privilege, both limiting and preventing exploits.

 

Drive Vaccine and Appguard. Very light and secure.

 

Faronics Anti-Excutable

 

DefenseWall Personal Firewall + Shadow Defender.

 

Online Armor Premium and Sandboxie.

 

Nice thread Kees

Sandboxie, NoScript (FF) and Windows XP firewall.

Bo

 

Bo

 

Malware Defender
Windows Firewall

 

Spyshelter Free on x86 Xp sp3
Comodo FW on x64 win7 sp1

 

. SandboxIE:
> always sandboxed: Opera - Windows Live Mail

. System drive always protected with Wondershare Time Freeze virtualization:
> Data Partition with folders to: Downloads - My Documents - Windows Live Mail - Opera user settings

. Firewall:
> XP - Windows 7 Firewall Control, Sphinx
> Win 7 x64 -Windows Firewall Control, Binisoft

 

My "no AV" setup:
Look'n'Stop + Mamutu + WTF
Firefox with NoScript, AdBlock, BetterPrivacy and Bitdefender TL

 

Online Armor + EMET (Not using SRP anymore)

 

Sandboxie + OA + NoScript (FF) + Keriver 1-Click Restore

 

Windows Firewall + some tweaks/add-ons on my browsers.

 

I had the following for more than 2 years

Returnil for Light Virtualization (AV turned off)
Sandboxie paid
Comodo Firewall

But now I have started juggling and so far I have

Shadow Defender
Sandboxie paid
Appguard
Emet

Great thread Kees

 

sygate firewall, mamutu, marewarebytes

 

Running XP Pro 64bit with Shadow Defender. Thats it.

 

See sig,secure and light