Personal computers protection

Corporate networks protection

Technologies

V.I.P.O. Technology

Technology sale

Safe`n`Sec 3.5 Test Methodology

User manual

Comments

Independent tests

Archive of personal protection products

Proactive protection technology

The V.I.P.O. technology is based upon system functions call interception on the Ring 0 level of the operating system. The Safe’n’Sec driver is loaded ahead of all other applications and thus allows it to intercept any system call and block it when needed.

On a more conceptual level the technology identifies, analyses and blocks the following type of actions, when it is required: file system and registry objects access, any application execution and network activities. The next level of technology abstraction is a versatile rules engine that allows to explicitly identify which actions are to be blocked under what circumstances. Extra conditions that can influence system’s behavior can, for instance, be the time or frequency of the action analyzed. Yet that’s not the half of it! On the next level of abstraction function meta rules that define the analysis algorithm itself and system response to various application actions during certain periods of time.

The rule base comprises two parts: system rules, that are not available for modification, and custom rules. The system rules are created and continually maintained by the S.N.Safe & Software experts. These rules are meant for protecting the operating system and well-known applications from known and unknown threats. Custom rules are defined by end users or system administrator in case of corporate product. These are meant for protecting applications and user priviledged information. In case of corporate product custom rules are defined by system administrator and carry out corporate serucity policies. Of course, we do not make our customers program rules manually, this is done via the last level of abstraction — a powerful and intuitive graphical user interface operating on the level of notions such as trusted application and confidential data. Products based on the V.I.P.O. technology do not require any tuning to start functioning properly. They are equipped with a firm set of behaviour rules sufficient for most users.