Behavior Blocker

lordraiden · November 30, 2008, 4:41pm

First of all Defense+ is not a Behavior Blocker.
To understand what is a Behavior Blocker and what is the differeces with an HIPS read this:
Behavior Contracts and Management Documents
Computer Science

Comodo Internet Security should integrate a Behavior Blocker, like Mamutu, ThreatFire, or Norton Antibot. This will add another security layer to CIS.
CIS=Antivirus(heuristic)+Firewall+HIPS+Behavior Blocker

Them CIS will be almost perfect ;D

jeremysbost · November 30, 2008, 4:45pm

I think the CIS team is planning to add the CAMAS/CIMA engine into CIS later on. This will be (I think) something like a Behavior Blocker.

lordraiden · November 30, 2008, 4:51pm

What means exactly CAMAS/CIMA???
Thanks

V7chy · November 30, 2008, 4:57pm

Comodo Instant Malware Analysis

https://forums.comodo.com/comodo_instant_malware_analysis_online_cima/welcome_to_our_new_online_service_for_instant_malware_analysis_cima-t27643.0.html

http://camas.comodo.com/cgi-bin/submit

V7chy

lordraiden · November 30, 2008, 5:04pm

But this is an online service…

V7chy · November 30, 2008, 5:05pm

Right now it is but CIS team is planning to add CIMA engine into CIS later.

V7chy

jeremysbost · November 30, 2008, 5:07pm

I know, it runs the possible malware and can tell if it is doing something suspicious. They will take this part of this engine and put it in CIS.

lordraiden · November 30, 2008, 5:11pm

Am ok, in this case comodo can be interested in www.virustotal.com they can add their engine to virus total.
Virus total get a lot of malware every days (30.000 files/day).
http://www.virustotal.com/estadisticas.html

V7chy · November 30, 2008, 5:19pm

They already haw but Virus Total has not listed Comodo AV yet…
I think Comodo already gets samples from VT. I’m not 100% sure about this…
You need to ask Melih about this

V7chy

Melih · November 30, 2008, 5:26pm

VT needed win2k capable scanner… we had to redo it for him… soon we should be there hopefull…

thanks
MElih

system · December 23, 2008, 12:34am

I like the idea.

It would be great to have a behavior blocker set, just in case a user makes a bad decision with D+.

For some may not make sense, but it is a handy tool for so many people. But would be great to see one that truly is smart and practically needs no human interaction.

Anyway, just a idea.

Best regards

Jazhawk · November 14, 2010, 3:43pm

LOL. Sorry about what?

-Jazhawk

disinter1 · November 17, 2010, 3:15pm

A behavior blocker would be great but it would be in Def+ and it would be a seperate stand alone product incase people dont want the firewall, antivirus, etc. So a bb and a hips in one and we would have the choice to stop or lower the power in the bb or hips. One can dream right?

kinemitor · November 17, 2010, 4:11pm

this topic is alrealy opsolete
BB is alrealy implemented in D+ cloud, i think this post should be closed

edit: but will be good to have it in offline

disinter1 · November 17, 2010, 6:16pm

Great! The D+ should become a stand alone product then ;D

SiberLynx · November 18, 2010, 1:44am

“Already”… since when & how ?! ???
Then, what do you mean by “D+ cloud” ? Is it a new term ? There is no such thing

No, BB is not implemented neither in Defense+ (the latter is pure HIPS - nothing like BB)
nor in the Cloud (that’s a scanner - not a BB by any means)
Even artificially combined as meaningless phraseology, the way you’ve done that or physically as it works now -
that cannot possibly be a substitution for Behavioural Blocker
CIMA is something that can come “remotely closer” (making funny phrases deliberately) but again cannot be considered being BB as well.

=======

Hi disinter1,

There are many discussions about BB in the forum which are more recent than this thread indeed and that is a matter of searching the forum
No, I don’t think so Defense+ will not become a standalone ever,

but The Behavioral Blocker as a standalone product should be released as the developers promised and there were no announcements yet that they have changed their plans in this regard.

Cheers!

SiberLynx · November 18, 2010, 7:24am

Hi fileextension , welcome to the forum

Sure, and you can try Emsisoft Mamutu - it is the best currently on the market
It is not free but worth it
Anyway it costs you nothing to have 30 days trial in order to get acquainted & have a feeling what it means - “having strong standalone BB”

… and then … When & If Comodo will eventually deliver promised goody you can compare & choose the right one

My regards

p.s. whatever you put into your signature is a wrong link , but you better refrain from placing any … especially when posting 1st time into a new forum