CIS4 : How will CIMA and Sandboxing work?

Comodo Internet Security - CIS Beta Corner - CIS
1

Since Comodo Internet Security version 4 is going to have many new features, I am curious to know how they will operate with CIS.

The two mains ones, that I am interested in are:

  • CIMA
  • Sandboxing

About CIMA feature:

  • I heard it will be used with the Behaviour Blocker, is there going to be a BB in CIS4?
  • Will CIMA work in realtime?
  • Can CIMA be used off-line (no Internet)?

About Sandboxing feature:

  • Will it work in the same way as Sandboxie or not?
  • Will it have full support for operatings running 64-bit versions of Windows Vista and Windows 7?

Thank you for answering as many questions.

stormer

2

I’m interested in this topic…so I’m just posting so that it will show in “Show new replies to your posts.” :stuck_out_tongue:

I don’t really know for sure.

3

same as the above^

4

As far as I know, CIMA will work as another heuristic (Behavior Blocker) in CIS. So yes, there is going to be a behavior blocker in CIS 4 and CIMA technology will be built in it.

Sandbox will work as a general use sandbox. Off course it will be different then Sandboxie (erm… better:)) and will be fully compatible with Windows 7/Vista 64bit.

Look forward to v4!

Cheers,
Josh

5

An improved version of Defense+ malware heuristic analysis?

6

Sandbox in win 64?

7

Yes, Comodo has a Win64 sandbox

eXPerience

8

Strange… Find it hard to believe. Kaspersky Sandbox won’t work 64bit either.
http://www.sandboxie.com/index.php?WindowsVista64

9

It’s just tzuk’s opinion, in the future we will see more and improving sandbox applications on x64. KIS, CIS, also Prevx, if I’m not misinformed.

10

Well, as I’m here anyway, I’ll try to answer all the questions with the information I have…

About CIMA feature:

- I heard it will be used with the Behaviour Blocker, is there going to be a BB in CIS4?
I guess you can think of it that way. I think CIMA will be part of the BHB
- Will CIMA work in realtime?
As it will be in the BHB, yes I think
- Can CIMA be used off-line (no Internet)?
I assume so.

I don’t have much info about CIMA tbh.

About Sandboxing feature:

- Will it work in the same way as Sandboxie or not?
AFAIK it depends on your needs. You can sandbox on application level or even further. I'm not really a Sandboxie user so don't know if it's different.
- Will it have full support for operatings running 64-bit versions of Windows Vista and Windows 7?
It works on 64bit and it also works on Windows 7

best regards,
eXPerience

ps : just read it back, I didn’t really answer did I ? 88)

11

For how long will 3.12 be supported after V4 is released?

12

I really cant wait for a sandbox that works on 64bit. But how are they getting past patchguard?

13

Good question.since the Sandbox will be integrated into CIS,which is already 64bit compatible,my guess is that this won’t represent a problem (it’ll utilize the existing D+ driver) ???

If you break it down a sandbox is basically a collection of policy restrictions and file containment,which D+ does to some extent already.

14

finally some new activity at Beta-Corner!
seems v4-beta is coming… anxious turns into nice dreams… only one month to 2010… (nice number! -make a bet.)
just two questions: with all these features, being full-compatible with VM’s… but at what level?
And, recovering will be on top of MFT/MBR (some more than CTM)?
Just get my new W7 working, on 3boot (XP-W7.64-Ubuntu), and very excited to go on V4. CHEERS!

edit: believe me… Ubuntu 9.10 is a pain to get working… GRUB2 update kicks ■■■ as Ronaldo kicks the ball to the goal.

15

Will the sandboxing feature be similar to DropMyRights, i.e., running selected programs under an LUA token?

16

? 88)

17

If so that wouldn’t be A sandbox… just Isolation. Sandbox included virtualization.

18

Please be aware that the first release of V4 will be a BETA. It may or may not contain all planned or wished-for functionality on all platforms.

I repeat, it will be BETA and should be considered a work-in-progress, as are all BETA releases.

This is not a pre-emptive excuse. It is a pre-emptive explanation that may very well be unnecessary. Time will tell.

Patience, grasshoppers. :wink:

19

I hope it works well right from beta, in my eyes if you release a product to beta it have better be 95% done and working. It also has to be free from any system crippling problems. We shall see, at least we get to play with it first. ;D

20

IMO that won’t be good because then us beta testers would have less influence.