Jump to content

Detection of Spywares using HIPS module


Recommended Posts

 

I personally consider very important that a security solution offers protection against all kind of malware, including spywares.

 

Well, I know a software which is sold as a Spyware named Spymaster that ESET cannot detect.

 


 

ESET Smart Securtity 9 Beta could detect this spyware professional using its HIPS module to detect as strange and non normal behavior.

Is it possible to create this functionality for this spyware and other similar products on the market?

 

Thanks in advance!

Link to comment
Share on other sites

The question is: can ESET detect unknown threat like spyware just based on its behavior using HIPS module?

Having always the need of creating a specific signature to detect each new threat that appears on the market is not a smart way to face zero day threats very common nowadays.

ESET has one of the best signatures on the market but they are not enough to stop very new threats....that is my opinion.

Link to comment
Share on other sites

  • ESET Moderators

Our technology relies on the combination of various detection techniques. Virus definitions are important, but so is the heuristic detection of new threats.

You can learn more about the respective layers of our protection at hxxp://www.eset.com/int/about/technology/

Link to comment
Share on other sites

  • Administrators

It's not malware but rather a commercial monitoring tool. Can you imagine how "happy" administrators would be if such tool was detected as malware? :) Of course, we'll consider adding a detection for it as a potentially unsafe application.

Link to comment
Share on other sites

Marcos,

Thanks a lot for your reply!

I know that Spymaster is a commercial spyware, but otherwise if it was malicious...

Would be possible that ESET's HIPS could detect the behavior related to a common spyware tool.

That is only a suggestion of someone who like a lot ESET's products and admire the knowledge and capacity of all your team.

Best regards!

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...