Security Architects - Products - Ozone FAQ - The Diigo Meta page

• 16 Oct 07
  

  Wisely

  antivirus firewall freeware opensource

  • Ozone is a Host Intrusion Prevention System that protects Windows server and client machines from malicious attacks and computer worms such as Blaster, MyDoom and Witty.
  • Ozone is designed to protect against both known and unknown attacks as well as protecting data against unauthorized removal (using networks, USB drives, etc).
  • Ozone does not rely on constantly updating signatures in order to keep up with the latest threats.
  • Ozone supports Microsoft Windows 2000, Windows XP and Windows 2003.
  • Does Ozone protect against buffer overflows?
     

     Yes, Ozone's memory protection ring is designed to provide transparent protection against memory related attacks such as buffer overflows.
  • Does Ozone support role-based user management?
     

     Yes, Ozone enables security managers to decide what each computer, application and user is allowed to do.  

     

     For example, a security manager can specify that user John Smith using computer #2 is allowed to access a corporate database, but is not allowed to connect to the Internet. Similarly, user Jane Brown using computer #13 is allowed to browse the Internet, but is not allowed to install any new applications or copy data onto USB removable drives.

  • Ozone can provide detailed audit trails of all actions carried out by selected computers, users or applications. 

     

     For example, Ozone can log all attempts to access a certain file, database or website.
  • What is the difference between Network Intrusion Prevention Systems (NIPS) and Host Intrusion Prevention Systems (HIPS)?
      

     Network Intrusion Prevention Systems (NIPS) monitor network traffic and look for signs of attacks.  

      

     They suffer from the same flaws as Intrusion Detection Systems such as being unable to handle large amounts of network traffic and being unable to decode encrypted sessions. 

      

     In addition, the only source of information available to them is network traffic, which means they cannot prevent local host attacks, control what users do on their computer systems or control unauthorized removals of data (i.e. by means of removable USB drives). 

      

     Finally, just like firewalls, NIPS might not see the network traffic that belongs to dial-up and VPN sessions. 

      

     Unlike Network Intrusion Prevention Systems, Ozone is designed to prevent both known and unknown attacks. In addition, since Ozone agents run on the end hosts, they have access to all the information necessary to prevent local host attacks, control malicious users and safeg
  • 
     Can I download Ozone?
     

     Yes!
      

    You can now download Ozone agent and its source code for free.

  7 more annotations...

Would you like to comment?

Join Diigo for a free account, or sign in if you are already a member.