Reply to thread

Message

<blockquote data-quote="AtlBo" data-source="post: 834654" data-attributes="member: 32547">What is the best way to describe the tools available to security programmers when designing a security application?&nbsp; I&#039;m not sure, but I gave it some effort below.&nbsp; Idea of the thread to use the below to build a super app from pieces of existing software that fit the category or at least the best possible combination of any of these types of protection.&nbsp; Don&#039;t have to go for them all, and it&#039;s fine to go for a lean combination.&nbsp; Just think of them being combined into one application.&nbsp; Example is the ability to fit Comodo HIPs ability to protect backup drives into an app, so that from alerts I can set which programs are allowed access to the drive.&nbsp; That would be for File/document protection.&nbsp; Choose which types of protections you would use and the applications that have the best module to date-&gt;build your best possible super app.&nbsp; Also, it&#039;s OK to have duplication of protections like HIPs document and roll back.&nbsp; Sometimes things get by security.&nbsp; Here are the types of protection I have come up with so far:1.&nbsp; Signature detection&nbsp; &nbsp; 1. Static
&nbsp; &nbsp; 2. Dynamic2.&nbsp; HIPs monitoring3.&nbsp; Anti-expoit-Memory protection (smart protections or trainable as with Comodo HIPs)4.&nbsp; Anti-EXE policy (Application whitelisting)5.&nbsp; Anti-EXE run-time (Application blacklisting (hope I didn&#039;t get these two backwards))6.&nbsp; AI/ML monitoring7.&nbsp; Sandbox protection (less configuration is better)8.&nbsp; Firewall protection9.&nbsp; File/document protection10.&nbsp; Secure backup11.&nbsp; Anti-keylogging12.&nbsp; Network monitoring/parental support (i.e-Gryphon type internet control software)13.&nbsp; Security tools (which ones)&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 1. File shredding
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 2. Mail shredding
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 3. Security cleaner
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 4. Mail scanning
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 5. Software updating14.&nbsp; Zero day protection15.&nbsp; Anti-ransomware (including roll back etc.)16.&nbsp; System policy (i.e.-Remote desktop refinement or improved user access limitation/management software)17.&nbsp; System monitoring and protection (i.e.-monitoring of system events, tasks, startups, clipboard monitoring, camera monitoring, anti-screen capture, and logs)-This includes monitoring and protection of Windows settings18.&nbsp; Browser filtering19.&nbsp; Password management20.&nbsp; VPN21.&nbsp; Data encryption22.&nbsp; Anti-theft software23.&nbsp; Script monitoring-Includes monitoring of interpreters24.&nbsp; Secure browsing and online banking and purchases-Can include Anti-tracking or other&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; features (can be in the form of a security browser or extensions or other software addons) Can include Anti-tracking or other features&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; (can be in the form of a security browser or extensions or other software addons)25.&nbsp; Behavior monitoring (i.e unknown application adding a driver or service)26.&nbsp; Boot protection-Anti-rootkit27.&nbsp; Tamper protection-Protection of settings28.&nbsp; Self protection-Protection of application run-time integrityIf anyone can think of another type(s) of protection I didn&#039;t mention, please say so.&nbsp; I will add it someplace in the list.I can&#039;t build my ideal application for now.&nbsp; I could come up with something about 1/4 decent if the software I would recommend were more reliable and/or flexible.&nbsp; I will work on the best I could come up with and post it later.&nbsp; Looking forward to seeing which protections are chosen...</blockquote>

[QUOTE="AtlBo, post: 834654, member: 32547"] What is the best way to describe the tools available to security programmers when designing a security application? I'm not sure, but I gave it some effort below. Idea of the thread to use the below to build a super app from pieces of existing software that fit the category or at least the best possible combination of any of these types of protection. Don't have to go for them all, and it's fine to go for a lean combination. Just think of them being combined into one application. Example is the ability to fit Comodo HIPs ability to protect backup drives into an app, so that from alerts I can set which programs are allowed access to the drive. That would be for File/document protection. Choose which types of protections you would use and the applications that have the best module to date->build your best possible super app. Also, it's OK to have duplication of protections like HIPs document and roll back. Sometimes things get by security. Here are the types of protection I have come up with so far: 1. Signature detection [INDENT] 1. Static[/INDENT] [INDENT] 2. Dynamic[/INDENT] 2. HIPs monitoring 3. Anti-expoit-Memory protection (smart protections or trainable as with Comodo HIPs) 4. Anti-EXE policy (Application whitelisting) 5. Anti-EXE run-time (Application blacklisting (hope I didn't get these two backwards)) 6. AI/ML monitoring 7. Sandbox protection (less configuration is better) 8. Firewall protection 9. File/document protection 10. Secure backup 11. Anti-keylogging 12. Network monitoring/parental support (i.e-Gryphon type internet control software) 13. Security tools (which ones) [INDENT] 1. File shredding[/INDENT] [INDENT] 2. Mail shredding[/INDENT] [INDENT] 3. Security cleaner[/INDENT] [INDENT] 4. Mail scanning[/INDENT] [INDENT] 5. Software updating[/INDENT] 14. Zero day protection 15. Anti-ransomware (including roll back etc.) 16. System policy (i.e.-Remote desktop refinement or improved user access limitation/management software) 17. System monitoring and protection (i.e.-monitoring of system events, tasks, startups, clipboard monitoring, camera monitoring, anti-screen capture, and logs)-This includes monitoring and protection of Windows settings 18. Browser filtering 19. Password management 20. VPN 21. Data encryption 22. Anti-theft software 23. Script monitoring-Includes monitoring of interpreters 24. Secure browsing and online banking and purchases-Can include Anti-tracking or other features (can be in the form of a security browser or extensions or other software addons) Can include Anti-tracking or other features (can be in the form of a security browser or extensions or other software addons) 25. Behavior monitoring (i.e unknown application adding a driver or service) 26. Boot protection-Anti-rootkit 27. Tamper protection-Protection of settings 28. Self protection-Protection of application run-time integrity If anyone can think of another type(s) of protection I didn't mention, please say so. I will add it someplace in the list. I can't build my ideal application for now. I could come up with something about 1/4 decent if the software I would recommend were more reliable and/or flexible. I will work on the best I could come up with and post it later. Looking forward to seeing which protections are chosen... [/QUOTE]

Verification