20070709 Leaktests 更新本期亮点：OP跃居第三

显示全部楼层 · 发表于 2007-7-11 10:14:36

2007-07-09: New results have been published for:
Look 'n' Stop 2.06
Outpost Firewall PRO 4.0 (1024.700.292)
ZoneAlarm Pro 7.0.362.000

Outpost Firewall PRO 4.0 (1024.700.292) finally improved the protection on the kernel level. The result of its previous version, 6550 points, was highly improved to today's 8700 points, which is a Very good level of anti-leak protection. Against some techniques, Outpost Firewall PRO still relies on user mode hooks, but against the most of the tests it implements strong kernel level protection.

ZoneAlarm Pro 7.0.362.000 does the same Very good job with 8600 points as its older version.

Look 'n' Stop 2.06 scores 4300 points, which is 500 points less than its previous version. This probably is the result of implementing Windows Vista compatibility and getting rid of hooks that were used by its previous versions.

Outpost Firewall PRO 4.0 (1024.700.292) 总分8700，比以前提高很多(6550)。对于大部分的测试，OP 实现了内核层保护，而不是像以前依赖于用户模式hook (在测试中表现很好，碰到实际的恶意软件很容易被unhook掉，FPR测试就是例子。) 。
ZoneAlarm Pro 7.0.362.000 和旧版本得分一样 8600
LnS 2.06 为了实现和 Vista的兼容，减少了hook，降低 500分。

用户模式hook 和内核模式hook 的争论由OP的转变看，就是最好的解释，虽然这种转变的过程是扭扭捏捏的，让 Agnitum 很不爽。Matousec Leaktests 促使包括 Agnitum 在内的防火墙厂商改变已有的安全观念，改进自己的产品，而不是做做样子，这比最后的测试结果更有意义。

由此，当我们拿到一个 HIPS/Firewall 的测试结果时，都要问一下，是否测试内核保护？是否去掉了用户模式hook？

显示全部楼层 · 发表于 2007-7-11 10:31:25

盖茨大叔的墙才0分。。。。

显示全部楼层 · 发表于 2007-7-11 10:45:46

[:27:]
又更新了~~~

显示全部楼层 · 发表于 2007-7-11 13:07:15

comodo厉害！

显示全部楼层 · 发表于 2007-7-11 16:06:35

了解了，谢谢！

显示全部楼层 · 发表于 2007-7-11 16:44:35

COMODO牛啊
继续使用中....

显示全部楼层 · 发表于 2007-7-11 22:41:35

卡7搞到第6去了啊进步神速啊

显示全部楼层 · 发表于 2007-7-11 22:41:48

COMODO牛哥
同时盖茨哥也菜了点吧，0分。

显示全部楼层 · 发表于 2007-7-12 00:27:07

COMODO很NB....

显示全部楼层 · 发表于 2007-7-12 10:31:48

正在用COMODO

顺便鄙视盖茨大叔一个

才0分

20070709 Leaktests 更新 本期亮点：OP跃居第三

20070709 Leaktests 更新本期亮点：OP跃居第三