Battle Anti-Executable Standard vs NoVirusThanks EXE Radar Pro

[JoeN]

Anti-Executable Standard

Faronics Anti-Executable allows only approved applications to run on a computer or server. Any other programs, whether they are unwanted, unlicensed, or simply unnecessary, are blocked from executing. Anti-Executable works on a "whitelist" principle. Any program that is not on the white list is considered unauthorized and will not install or run. With the number and complexity of malware threats steadily increasing, relying solely on definition-based anti-malware solutions to ensure security is no longer enough. Anti-Executable offers a necessary additional layer of protection to the existing "blacklist" solutions such as antivirus software without the need for definition updates.

NoVirusThanks EXE Radar Pro

NoVirusThanks EXE Radar is a useful Windows OS utility designed to alert a user everytime an unknown process tries to run in the system. The end user is able to whitelist, blacklist, allow once, block once or block + delete the executable attemping to load. Whitelist and blacklist files are securely saved to disk with their MD5 hash, making sure they cannot be hijacked.

With NoVirusThanks EXE Radar you can browse the Internet more safely, for example, if you are redirected to an infected website that tries to exploit your browser and load the payload, NoVirusThanks EXE Radar will alert you prior to the unknown executable executing which effectively allows you to disallow it. NoVirusThanks EXE Radar is great protection against web browsers exploits, rogue security software and any kind of unknown executable.

It is possible to auto-allow SYSTEM protected files (recommended for beginners), auto-allow applications with a digital signature, alert only for blacklisted processes (passive mode) and also available is a “Gaming Mode” option that passively deny all new and unknown processes, except whitelisted and system processes. Also included is an option named “Stealth Mode” that can be used to completely hide NoVirusThanks EXE Radar’s main window and tray icon where the end user can define their own hotkey to enter in stealth mode.

Other than real-time protection against unknown executables, NoVirusThanks EXE Radar also offers a process manager where you can view all running processes, terminate specific processes or add to the whitelist all currently running processes or all running system-protected processes. There is also a full action event log where you can monitor all actions and all processes that have been allowed to execute or denied execution.

 

[Jack]

This type of programs have been around for a many of years, and its main concept hasn't changed. If a program is on the list, it runs; if not, it doesn't. However a anti-executable isn't for everyone as there are quite a few ways for the user to go wrong in dealing with its protection.
Once a user has the necessary skill to use such a product , he will most likely didn't need it anymore.
For the average user , a smart HIPS and a Limited User Account would definitely be a better option.

I will give them both a try and report back.
First thing I've notice : Anti-Executable Standard can be installed on Windows 7 64bits , while NoVirusThanks EXE Radar Pro is only available for the 32bit versions.

[attachment=631]