SSM or Other HIPS

Hello guys, thisis my second thread and i am wondering what do you guys THINK is a better HIPS than SSM. I currently use SSM free and considering other HIPs. I think i posted it in the right place, correct?
THank you.
Eddie

 

I tested a lot around with all kind of HIPS and bought finaly yesterday the Full version 2.1.
In my personal expirience its lighter than each other HIPS, very clean GUI and one of the view, if not the only one, which passed the on Wilders latest discussed Malware , etc. tests. As you run the free version, just install the trial, and you will see the big difference in controling possibilities. For me SSM as a standalone as also in combination with Jetico =>

 

EddirT.H.,

This is the right place. As for other HIPS, whether you need a HIPS, etc., the best starting point is to figure out your personal objectives (execution control, general termination prevention, termination prevention applied to security apps only, registry protection, AV backup, etc), desired interaction style (lots of prompts/alerts (at least at the start) vs. minimal user input), and so on. These are things you need to articulate since better will be strongly dependent on them.

Blue

 

IMO the paid version of SSM is currently the best HIPS so far, it brings a very strong layer of detection, it covers so many areas... Just try it

 

I'm too stupid for SSM, so I bought Prevx1 to prevent installation of malwares.

 

The paid version of SMS -- dai-ichi-ban desu YO!

HIPS tests -- some recent; some in mid-2005...

abtrusion protector http://kareldjag.over-blog.com/11-categorie-69553.html
abuse shield http://kareldjag.over-blog.com/categorie-69553.html
all-seeing eye http://kareldjag.over-blog.com/1-categorie-69553.html
antihook test http://kareldjag.over-blog.com/2-categorie-86447.html
DefenseWall http://security.over-blog.com/categorie-566881.html
Ossurance desktop http://kareldjag.over-blog.com/5-categorie-69553.html
PG vs SSM vs ViGuard http://kareldjag.over-blog.com/2-categorie-69553.html
Prevx Pro test http://kareldjag.over-blog.com/1-categorie-86447.html
Process Guard http://kareldjag.over-blog.com/7-categorie-69553.html
SafeNsec test http://kareldjag.over-blog.com/3-categorie-86447.html
SafePC http://kareldjag.over-blog.com/categorie-86447.html
Securitask http://kareldjag.over-blog.com/9-categorie-69553.html
Softclan Integrity http://kareldjag.over-blog.com/3-categorie-69553.html
SSM http://kareldjag.over-blog.com/8-categorie-69553.html 9/10
ViGuard http://kareldjag.over-blog.com/6-categorie-69553.html

sandbox reviews http://www.techsupportalert.com/security_virtualization.htm

 

Have in mind the the above test was done with SSM 1.96.2 beta. New actual full version is far better

 

I only want free HIPS, i juststarted using hips about a month ago and wonderingif there were mroe secure yet less popups and lower resource otherwise is SSM plus Comodo and Nod32 good enough? i also have AVGAS SAS A2 Spybot search and destroy and sophos antrootkit

I am looking formore better real time protection like SSM, PLease dont recommend Spyware terminator, i dont trust porgrams with a bad history
Thank you
Wilders is best

 

Bellgamin,
Thanks for posting all these links.
These tests are very informative and a good indication to choose the one you like the most.
ProcessGuard isn't compatible with FDISR and chinese to me and SSM is arabian to me.
I bought Prevx for a year, because that's the one I understand.
It's a pity that the used Prevx version is pretty old. I recognized that ugly, depressive, black GUI immediately from the past. Maybe its score of 7.5/10 is improved.
So Prevx1 is definitely a part of my security setup along with Look'n'Stop, now the rest.

 

Edie TH,

When you spend your time to configurate SSM (access to memory, parent-child control, dll-injection, etc) you problably end of with the best protection I can think of.

According to your safety signature you will have:
- AV: NOD32 (which has excellent Heuristics by the way)
- BO: BOClean
- FW: Jettico
- HIPS: SSM

You will have a rock solid protection. When your machine can handle the load and you use an additional Sandbox/Virtualisation program you will have the digital version of Fort-Knox.

I have started a thread asking experienced SSM users to share their knowledge

 

EddieT.H. :

Well even the free SSM is very good. I dont usually like to recommend unless I think its very good, as I write as a sideline and get alotta freebies given to the publications, but SSM is one I purchased and recommend. As for less popups I think Prevx1 has a mode suiting you - by the way your security is good, I seem to have a copy of everything your using but perhaps you could also try Abtrusion Protector or VMSurfing with the VMware Player as your looking for free.

 

Yes indeed i feel fuzzy warm and safe with that setup. I have Sandboxie installed, but not running, only in very special cases when i am going to look at naked womans in the Internet
What i haven't mentioned is that sensitive data is encrypted (on the fly) and you will only get access with a eToken o iKey and special programs.

 

Hi,

SSM is a very impressive representative of only one kind of HIPS. Yes, maybe the best choice if you wanna control any kind of activity on your computer AND if you are a specialist.

But you have at least two other kinds of HIPS:
One represented by Prevx (CIPS), extremely interesting for non specialists.
One by the new generation of sanboxes, with no popups, and which lets you mess with your computer.

I think they are roughly of equal value and the choice depends on the real needs of the user.

 

Is BOclean free and what is a sandbox?
Plus, What is the better firewall? Comodo or Jetico. I have not tried Jetico,but i heard it is good or should i stick with comodo? Which firewall takes less processes?

 

I would suggest to stay with Comodo, it is more user-friendly than Jetico.Also they are similar in protection.

 

Been using SYSTEM SAFETY MONITOR and after trying all the others have landed on SAFE ground with it. Excellent Stability, Solid Protection, Splendid Monitoring and the list goes on.

Just depends on the results that work best for your system and your conscience.

 

BOClean is not free...

 

using SSM free too. Not bad.

 

SO after all this discussion...
Is my security setup protective?
PROACTIVE:NOD32 COMODO SSM SPYWARE BLASTER
ON-DEMAND:SAS AVG-AS A2 SPYBOT SEARCH AND DESTROY

How is this?



I ahve firefox with noscript and windows (fully patched)

 

It is OK.

 

Perfect if you are looking mostly for freeware and if you are a user of normal knowledge regarding what's going on on your machine..

 

What's the perfect settings for an expert user?

 

I have refered more to freeware as to the aspect of knowledge. I personal don't like Comodo, i tried it once.
I like security applications which allow me to be in control of the smallest security movement on my PC. That's one of the reasons why i choosed Jetico and SSM payed version. But this means also, that with a wrong rule or configuration you can block or in worst case do more damage than good; and for that more knowledge is needed.

 

So... What else should i add?
Thanks

 

In simple words: 'Nothing'
It's a very good combination, good applications and if you feel comfortable with the handling of each, perfect.

Edit:
You could ad a Rootkit detector to your collection just to feel more fuzzy.