Jump to content

Comodo Internet Security

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Jeremysbost (talk | contribs) at 20:26, 26 May 2010 (Edited image in infobox). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Comodo Internet Security
Developer(s)Comodo Group
Stable release
4.0.141842.828 / April 12, 2010 (2010-04-12)
Operating systemMicrosoft Windows
TypeInternet Security Suite
LicenseProprietary
Websitewww.comodo.com

Comodo Internet Security (CIS), developed by Comodo Group, is an all-in-one Internet security suite available for Microsoft Windows 7, Vista, and Windows XP. It offers a Antivirus protection, a packet filtering Firewall and a host intrusion prevention system (HIPS) called Defense+. Version 4.0 also includes a sandbox feature for isolating unknown applications.

The multilingual CIS offers different installation modes, one can choose to install only the Antivirus or the Firewall or both. The different features can simply be deactivated after the installation as well.

It is available in Free, Plus, Pro and Complete editions. The paid versions offer additional services, such as LivePCSupport, TrustConnect, Online Backup.

Layered Security

Comodo Internet Security was designed around the concept of layered security[1], by integrating components designed to prevent intrusions upon a computer system (the Firewall, Defense+, and Memory Firewall), with components designed to resolve any intrusions which the other components miss. (Recently the antivirus component integrated Comodo's anti-malware program BOClean).

Components

Firewall

Comodo's Firewall generally wins high scores on Firewall testing sites, such as Matousec, and has regularly been included in the top three firewalls.[2] The firewall component has been declared Editor's Choice by PC Magazine[3] and Gizmo's Tech Support Alert.[4]

HIPS (Defense+)

Comodo's HIPS (host intrusion prevention system), known as Defense+, is designed to provide protection against unknown malware. It is designed to restrict the actions of unknown applications, and restrict access to important files, folders, settings and the Windows Registry. Defense+ employs Default Deny [5] Protection, by default refusing any unknown file permission to install or execute except when specifically allowed by the user or when the file appears on Comodo's whitelist.

Antivirus

Comodo's Antivirus Software was publicly released along with the Comodo Internet Security Suite on October 23, 2008[6]. Ever since CIS 3.8, it offers a heuristics engine built into the scanner.

Online Scanner

The Comodo Automated Analysis System is an online scanner[7] that scans suspicious files and reports back its findings.

Memory Firewall (Buffer Overflow Protection)

Comodo Memory Firewall, integrated in CIS 3.8, is designed to protect against buffer overflows and the infamous Return-to-libc attack. The memory firewall protects all applications. Comodo Memory Firewall detects buffer overflows occurring in the STACK and HEAP memory, as well as ret2libc attacks and corrupted/bad SEH Chains.[8] This buffer overflow protection is part of Comodo's prevention layer in the security suite. The need for BO protection is ever increasing due to their increasingly common use in computing to exploit end users.[9]
On the attempt of a buffer overflow attack, CIS raises a pop-up alert. This provides protection against data theft, computer crashes and system damage, which are possible consequences of a buffer overflow attack.

ThreatCast

ThreatCast is a community-based advice system, which gathers information about decisions other users have taken regarding certain actions on a user's computer. These statistics are then displayed in alert windows, giving the user an idea as to whether the action is safe, or dangerous.

Criticism

A common complaint about Comodo Internet Security is the excessive number of alert windows displayed.[10] A whitelist has been implemented in an attempt to reduce alerts for trusted applications.

Another complaint is that it is currently not possible for users who mainly use the keyboard (e.g. the accessibility-challenged) to respond to CIS pop-up alerts via keyboard shortcuts.[citation needed]

Also, a major criticism has been the low detection rates of the antivirus component.[11]

COMODO Internet Security V4

COMODO Internet Security V4 was released for beta testing on 11 January 2010, and the final version was released on 3 March 2010. Among other features, version 4 has a new user interface theme, built-in Comodo Live Support integration, application sandboxing, reduced pop-up alerts and the ability to easily take system snapshots or create restore points.[12]

Reviews

References

  1. ^ http://www.melih.com/2008/05/05/a-door-a-burglar-alarm-and-insurance-all-you-need-for-computer-security/
  2. ^ "Proactive Security Challenge: Results and comments". matousec.com. 2010-05-01. Retrieved 2010-05-25.
  3. ^ "Comodo Firewall Pro 3.0". pcmag.com. 2007-12-18. Retrieved 2010-05-25.
  4. ^ "Best Free Windows 7 / Vista 64 bit Software". techsupportalert.com. 2010-05-22. Retrieved 2010-05-25.
  5. ^ http://industry.bnet.com/technology/10001432/microsoft-trying-to-change-its-security-identity/
  6. ^ http://www.comodo.com/news/press_releases/28_10_08.html
  7. ^ Comodo online scanner
  8. ^ http://www.memoryfirewall.comodo.com/
  9. ^ http://secunia.com/secunia_research/
  10. ^ http://www.scotsnewsletter.com/93.htm#swfw
  11. ^ PCWorld – Comodo Internet Security Antivirus
  12. ^ "Release Notes". Comodo Group. 2010-03-03. Retrieved 2010-03-04.

External links