防火墙部分
As expected, the suite's firewall successfully stealthed all ports, making the test computer effectively invisible to attack from outside. In some cases it specifically detected my Web-based tests as port scan attacks, but regardless of whether it named the attack, it successfully defended the system.
正如所期待的那样,这个套装成功的隐藏了所有端口,使测试计算机有效的消失于外界攻击,.在某种情况下,它能有效的侦测到我的作为端口攻击的 Web-based (以网络为基础的?)测试,但不管它能否命名这攻击,它成功的保卫了系统.
The other half of personal firewall protection is program control, often embodied in annoying pop-ups that ask whether such-and-such a program should be allowed Internet access. I like the way Norton Internet Security avoids those pop-ups by making its own decisions. ZoneAlarm culls the flock of pop-ups by preconfiguring access for many thousands of common programs. And KIS7? By default, it doesn't display any pop-ups—because by default, program control is turned off! All programs are allowed access except those blocked by specific user-defined rules. To get the expected level of program control, you have to turn the firewall's program control level from Low to Training Mode. (There's also a High setting that blocks all programs except those explicitly allowed by user-defined rules; most users will find this mode unbearable.) I'm in favor of reducing the number of confirmation pop-ups, but not by turning off protection!
其余一半的防火墙保护是程序控制,常常体现于困扰人的pop-ups,问这个或那个程序是否应该网络通行.我喜欢诺顿网络安全特警2007的工作方式,避免了这些pop-ups,通过它自行决定. ZoneAlarm剔出成群的pop-ups,通过重新设定几千常见程序的通道.而KIS7呢?默认情况下,它不出现任何pop-ups-因为默认下,程序控制是关闭的.所有的程序都允许通过,除了那些被用户特别规则阻止的程序.为取得期望程度的程序保护,你不得不把程序管理级别从低改到学习模式.(这也是很高的设定,它阻止所有程序,除了那些被用户定义规则特别允许的;大部分用户会发现这模式不可忍受).而我喜欢减少设定pop-ups数目,而不是关闭保护.
When only authorized programs can access the Internet, the sneakier malware will try to gain access by subverting an authorized program or pretending to be one of the authorized elite. In its default configuration, KIS7's firewall doesn't block these devious tactics. But after I cranked up its protection for the malware-blocking tests, it was equally effective at detecting attempted end runs around program control. Not only did it catch all the "leak tests" I tried, it identified the sneaky trick being used, such as "Process is trying to inject into another process."
但只有授权程序能通过网络时,偷偷摸摸的恶意程序会试着取得通过权利,通过破坏一个授权程序或装作一个授权的精华(原意如此,我猜是关键程序).在它默认设定下,KIS7防火墙不阻止这些欺诈的战术.但当我开始对于它阻止恶意程序的保护测试,它同样有效的侦测企图绕过它程序控制的程序.它不只抓住所有我试的leak tests,它还识别出使用的偷偷摸摸(的程序),比如一个程序试着侵入其它进程.
I will say this: The firewall is as tough as an MRAP armored vehicle. Malicious software attempting to shut down its protection won't get anywhere. It doesn't expose important processes to Task Manager. I tried to shut down its essential Windows Service, but that was protected. Its Registry settings can't be changed manually. I couldn't even turn off protection using fake mouse clicks; it recognized them as fake and ignored them.
我会这么说,这防火墙与 MRAP armored vehicle一样牢固.试着关闭它保护的恶意程序不会有任何进展.它不会暴露重要进程于Task Manager(任务管理器).我试着关闭必要的Windows服务,但这是保护的.它的注册表设定不能手动改变.我甚至不能用虚拟鼠标点击关闭保护;它把它们认为是虚假的并忽略它们.
这个网站,大家有争议.但我记得诺顿包装说它得了这网站的4.5星评价.我想,它还是可以的.
这都是我自己翻译的,生词查自白度.我还没过四级,呵呵,水平有限,大家谅解.谢谢!!!!!!!1 |
楼主: hljdqzr
发表于 2007-8-19 11:34:23
楼主
