|
Poslao: 31 Jan 2010 11:33
|
offline
- pedja93
- Saradnik foruma Linux
- Pridružio: 10 Jun 2009
- Poruke: 1203
|
diarno ::pedja93 ::Izvinjavam se sto ovako "upadam" u temu! Da li mi moze ovde neko ukratko objasniti sta je AV-ov engine ili trebam otvoriti novu temu?
Srz svakog Antivirusa... Ono sto stoji "iza" Gui-ja.. Ono sto detektuje malware-a, klasifikuje nesto da je malware(na osnovu informacija iz baze definicija ), komunicira sa svojim ostalim komponentama, operativnim sistemom, preko svojih slojeva i drajvera-Filesystem Layer) itd.
Imas ovde mnogo lep text o tome sta je engine, sta sve pokriva, sta sve kontrolise i sl.
http://www.securityfocus.com/infocus/1552
Hvala diarno 
|
|
|
|
|
Registruj se da bi učestvovao u diskusiji. Registrovanim korisnicima se NE prikazuju reklame unutar poruka.
|
|
|
Poslao: 29 Avg 2010 13:33
|
offline
- dr_Bora
- Anti Malware Fighter
Rank 2
- Pridružio: 24 Jul 2007
- Poruke: 12280
- Gde živiš: Höganäs, SE
|
Citat:Online Armor Firewall 4.5 now with 64 bit support
Emsisoft Online Armor ++
... the next version of Online Armor Free, Premium and ++ with the lovely number 4.5. Our most comprehensive security software is now ready for Windows 7 x64.
|
|
|
|
|
|
|
Poslao: 27 Feb 2011 12:27
|
offline
- frank326
- Novi MyCity građanin
- Pridružio: 27 Feb 2011
- Poruke: 14
|
ja obozavam OA fenomenalan FW .citao sam dosta o njemu i odlucio sam da ga probam instalirao sam ga preko virtual box na windows xp .i totalno sam se odusevio kada sam video kako je dobar i efikasan FW. HIPS je odlican jeste da je malo dosadan ali po mom misljenju je koristan preko HIPS tacno znam sta se desava tokom instalacije programa tacno znam sta menja u reg i na sistemu .testirao sam ga preko leak testova i sve napade je odbio bez ikakvih problema.cak je uspeo da odbije napade sto comodo nije mogao.
|
|
|
|
|
|
|
Poslao: 09 Apr 2011 08:57
|
offline
- dr_Bora
- Anti Malware Fighter
Rank 2
- Pridružio: 24 Jul 2007
- Poruke: 12280
- Gde živiš: Höganäs, SE
|
 | Emsisoft Online Armor Firewall 5.0 available!
A Firewall keeps a constant eye on the data traffic of your computer and only allows Internet and local network connections for authorized programs and processes. In recent years, Emsisoft Online Armor has made a name for itself as a comprehensive security solution that is also easy to understand and operate for those who are not computer experts.
This Firewall not only protects the user against attacks from the Internet but also allows permanent monitoring of suspicious system-internal processes. Online Armor is therefore also a full-featured HIPS (Host Intrusion Protection System), in other words a type of Firewall for internal operating system processes. |
Emsisoft Online Armor 5.0: An overview of the new features
* New user interface
Version 5.0 of the Firewall has a completely reworked user interface. This is based on the design of the other Emsisoft products. In addition to creating a unified product appearance for Emsisoft programs, the aim was also to greatly simplify the operating concept. The opportunity was also taken to improve the readability of the alert window messages displayed directly above the Taskbar System Tray when an alert is generated.
* New feature: File & Registry Shield
Online Armor 5.0 now also protects selected files, folders and registry keys from being changed. A rule system based on trust-level settings exactly defines the programs that have full access, partial access or no access to the protected areas. This provides special protection to the user against ransomware attacks, where important documents are encrypted and ransom money is demanded for the encryption key.
* Improved self-protection
Online Armor itself now offers improved self-protection on both x86 and x64 systems, giving you that additional peace of mind that your system is protected all round against manipulation from malware and hackers.
* Alerts in the case of suspicious program paths
A new feature is the Guard module that checks and blocks suspicious file paths such as double file extensions, which are still very commonly used in email attachments (e.g. *.pdf.exe or *.doc.exe), Unicode paths (characters that appear similar) and supposed system files that are actually in the wrong location.
* Over 400 improvements in various details
Emsisoft works very closely with the user community. As a result of direct customer feedback, over 400 improvements to various details have been made when compared to version 4.5.
http://www.online-armor.com/downloads.php
  
  
|
|
|
|
|
|
|
|
|
|
|
Poslao: 10 Apr 2011 19:56
|
offline
- Aleks Maletic
- Ugledni građanin
- Pridružio: 19 Jul 2010
- Poruke: 367
- Gde živiš: Golubinci
|
Kolika je potrosnja resursa kod ovog firewall programa? Instalirao sam ga i prakticno ne primetim nikakve promene, kao da sam ostao samo na Aviri Free... 
|
|
|
|
|
|
|
Poslao: 11 Apr 2011 17:59
|
offline
- Pridružio: 27 Okt 2007
- Poruke: 32
|
matousec.com se izgleda zece pokacio sa Tall Emu Pty Ltd koja ima u vlasnistvu online-armor i nece vise da testira ovaj firewall.Detaljnije u tekstu;
Online Armor temporarily disqualified (2010/09/07 07:2
Different Internet Experience Ltd. has established number of business connections on the field of Windows security. Our clients and partners, vendors of the market leading security products, benefit from our testing and research services. Many of their products implement the technology that was designed, developed or tested in our labs.
One of our business connections, partnership with Tall Emu Pty Ltd, the original vendor of Online Armor, has been ended recently. Our break-up did not go well. Our company raised claims against Tall Emu Pty Ltd closely related to Online Armor products that have not been satisfied and hence the whole dispute will probably take a long time to solve. In order to protect our company we are forced to temporarily disqualify Online Armor products from our projects. Online Armor will be returned as soon as the dispute is solved or when there is a significant move in the case that is likely to solve the case in a short period of time. We apologize to our visitors for any inconvenience.
|
|
|
|
|
|
|
Poslao: 13 Maj 2011 18:51
|
offline
- Aleks Maletic
- Ugledni građanin
- Pridružio: 19 Jul 2010
- Poruke: 367
- Gde živiš: Golubinci
|
Dr. Boro, posto sam u par navrata cuo da koristite Online Armor ++ interesuje me sledece. Za firewall i HIPS znam da su fantasticni, ali antivirus i antimalware ovog proizvoda stvarno slabo poznajem. Da li mozete nesto vise da mi kazete o detekciji i efikasnosti navedenih komponenti kod ovog security paketa?
|
|
|
|
|
|
|
Poslao: 13 Maj 2011 20:42
|
offline
- dr_Bora
- Anti Malware Fighter
Rank 2
- Pridružio: 24 Jul 2007
- Poruke: 12280
- Gde živiš: Höganäs, SE
|
Ne mogu reći sa sam imao prilike na svom kompjuteru da vidim koliko je AV modul dobar - ono, malware prvo mora da prođe kroz Program Guard, a to je, je l', malo teže. 
Emsi/Ikarus, može se reći: očekivano, ima visok nivo statičke detekcije. Što se tiče uklanjanja aktivnog malware-a, to je ranije bila slaba tačka Emsi-ja. To se, bar donekle, uklapa u njihovu filozofiju; da li je opravdava, to je druga priča - po njima, za jednom inficiran Windows, nikada se više ne može garantovati da nije i dalje kompromitovan (obzirom na kompleksnost današnjeg malware-a, ima to dosta smisla). Stoga, njima je uvek bio prioritet razvijanje detekcije i nisu se mnogo štrecali na prigovore vezane za slabosti oko uklanjanja malware-a.
E, sad: kakvo je stanje sa OA++, teško je reći. S jedne strane u pitanju je napredan HIPS i program sigurno ima tehnološku osnovu da se izbori sa vrlo kompleksnim malware-om. Ono što ne znam jeste na koji način je moć Program Guard-a iskorišćena od strane AV modula.
Recimo, ja bih u toj kombinaciji softvera prosto izmenio podešavanja unutar Program Guarda za dati detektovani file, tj. blokirao ga - malo toga bi moglo da se odupre OA-ovim driverima i preživi idući restart. E sad, to bih ja uradio; šta su oni uradili, to mogu samo da nagađam.
Ili: smatram da su Emsi/Ikarus odličan komplement Program Guard-u, ali ne bih preporučio korišćenje OA++ bez HIPS-a i oslanjanje samo na AV (ne zato što su Emsi i Ikarus loši, već zato što mislim da su implementirani sa idejom i na način da budu dopuna programu, a ne njegova osnova).
|
|
|
|
|
|
