, 2006-07-12
Federico Biancuzzi interviews Eyal Dotan, who has developed application-level virtualization software that protects Windows hosts from malware. They discuss the architecture, advantages of this design, performance, and how this method could be applied to servers running Windows or be ported to other OSes.
Expand all |
Post comment
This isn't a discussion about replacing AVs. AVs are good in some areas (precise detection of known malware), and weak in other areas (protection of your system from unknown programs & threats).
Virtualization is necessary for securing P2P, Internet downloads, IM file transfers + vulnerabilities. Would you trust your AV for downloading & running files from unknown sources?
Btw: BufferZone's Pro version does include an advanced granular firewall that allows you to control access permissions from BufferZone as opposed to Trusted Zone. But in general, the way BZ protects the Windows' core system, registry and DLLs does not require to use such firewalling rules in practice.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/410/33815#33815