Re: Abtrusion - Anyone use this?

• Previous message: Rowdy Yates: "Re: Getting worried about the CISSP"
• In reply to: *Vanguard*: "Re: Abtrusion - Anyone use this?"
• Next in thread: *Vanguard*: "Re: Abtrusion - Anyone use this?"
• Reply: *Vanguard*: "Re: Abtrusion - Anyone use this?"
• Reply: Bogus: "Re: Abtrusion - Anyone use this?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Fri, 26 Mar 2004 04:59:52 GMT

"*Vanguard*" <no-email@post-reply-in-newsgroup.invalid> wrote in
news:fb2dnWE-srm4Kv7dRVn-jw@comcast.com:

> "Bogus" said in news:c406hu$2d6khl$1@ID-152061.news.uni-berlin.de:
>> "*Vanguard*" <no-email@post-reply-in-newsgroup.invalid> wrote in
>> message news:ILadnRWkrqlwFf7dRVn-uA@comcast.com...
>> Abtrusion lets you control what is allowed to run on your system.
>> No, it's not permissions stuff. I already run an anti-virus scanner
>> to monitor incoming traffic and to check if something tries to run
>> that is already on my system that is infected. However, until the
>> anti-virus program schedules its next up update, my system is
>> vulnerable (although that is not long hopefully since I let it
>> perform automatic updates). It also takes time to detect that a
>> virus is on the loose, to determine how to identify it, and possibly
>> to kill it, all of which lengthens the window of opportunity.
>> Abtrusion takes the tack of preventing anything from running unless
>> allowed. I think there is another product called something like
>> System Safety Net (not sure about the name).
>>
>> I'm interested but wonder about the following:
>>
>> - How much do these products get in the way of using your computer?
>>
>> - How much do they slow down opening programs (i.e., what's the
>> impact on how snappy your applications startup)?
>>
>>
>>
>>
>> I tried abtrusion for a while; left it for this program that worked
>> better for me.
>>
>> http://maxcomputing.narod.ru/ssme.html
>>
>> Each of them had a slight impact - abtrusion had a heavy start-up
>> time, but little action after that. SSM will popup whenever it comes
>> across something new, or if something changes, or if something is
>> reaching beyond its space.
>
> So what is the NAME of this other program? That site is
> non-responsive and it might help if I knew what was "SSME", assuming
> that's the initials for the product, so I could research it through
> Google in the meantime.
>
> If I understand you correctly, Abtrusion impacts the Windows startup
> time but very little after that whereas SSME does not impact startup
> time but will popup whenever a new program wants to run. I believe
> Abtrusion lets you take a snapshot if you consider your system clean.
> Does SSME do that, too, so you don't get prompted for every program
> immediately after it is installed? Otherwise, you'll be spending most
> of your time for the first day or two just answering prompts.
>
> Update:
>
> Ah, by the time I got writing the above, the web site responding.
> SSME = System Safety Monitor (don't know the reason for the "E" in the
> path to the product). Well, I was close; only was off on the last
> word. A couple months ago I came across mention of these. One of the
> arguments was over which used the better "signature" to identify a
> file. One used a hash code (which is not guaranteed unique and could
> be spoofed providing the infector knew how the protector hashed the
> file's contents) and the other used some other technique.
>
> This is for my personal computer at home. So far I have not been
> infected with viruses, trojans, or spyware (although 2 tried to
> infiltrate in the last year). So my shields are adequate at the
> moment but I figured it's about time to reevaluate to see if I need to
> raise the shields higher. I create periodic disk images for disaster
> recovery and tape backups for data restores but I'd rather not bother.
> That is, I strongly believe in proactive maintenance with incremental
> cost in time and money rather than reactive disaster recovery.
>
> SSM seems to be free but all its downloadable versions are also listed
> as "beta". Also, the "English, prolonged until December 2004) makes
> it appear that it self-expires.
>
>
>

I just tried SSM and had some trouble with it always thinking that Outlook
had changed every time I loaded Outlook. And there was no way to change or
fix that. In general, the program looked interesting, but I wasn't all
that impressed, so I removed it just because of the Outlook problem alone.

I also just installed Abtrusion and it looks very nice so far. It didn't
have any problems with Outlook, so there must be something wrong with SSM.
Abtrusion has some features that let you install new software or updates,
so that problem has been handled I guess. Looks good so far. I don't
notice any significant loading time difference either. Maybe takes a
little longer, but nothing I can't live with...

Looks good so far...

-- 
Kerodo

• Previous message: Rowdy Yates: "Re: Getting worried about the CISSP"
• In reply to: *Vanguard*: "Re: Abtrusion - Anyone use this?"
• Next in thread: *Vanguard*: "Re: Abtrusion - Anyone use this?"
• Reply: *Vanguard*: "Re: Abtrusion - Anyone use this?"
• Reply: Bogus: "Re: Abtrusion - Anyone use this?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]