Windows IT Pro is the authoritative and independent resource for windows nt, windows 2000, windows 2003, windows xp. Features a collection of resources and magazines for windows IT professionals.
  
  
  Advanced Search 


November 20, 2008

Types of Endpoint-Protection Products

RSS
Subscribe to Windows IT Pro | See More Security Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!
Main Article    Endpoint-Protection Products

Endpoint-protection products include these types of solutions: Antivirus software, which seeks potentially malicious executable code, is central to any protection system. Antivirus scanning engines typically search for signatures characteristic of known viruses or use heuristic analysis to test questionable code. Spyware, designed to gather and relay information from your computer, typically runs in the background. Antispyware agents similarly operate behind the scenes, watching the programs on your computer for symptoms of pernicious behavior. Anti-rootkit–scanning tools look for symptoms of known rootkits, a special kind of malicious software designed to take control of your computer at or below the OS level by subverting kernel-level modules, for example. Another component of many endpoint-protection applications is the ability to detect unsolicited email or spam. Client firewalls, on the other hand, monitor network traffic to and from your computer. Unwanted traffic can compromise your system’s functioning by interfering with legitimate network traffic, such as Denial of Service (DoS) attacks, and can provide a venue for intruders to install malware. Firewall rules describe traffic that can be allowed or blocked at the network interface based on IP address, IP port, or originating application. For example, you likely want your favorite Internet browser to be able to communicate via IP port 80 but don’t want to grant the same privilege to unknown applications. Web scanning engines, using the same antivirus scanning methods just described, also inspect web pages for malicious content before they’re displayed in the browser window. Email scanners can operate at the network level with knowledge of email protocols such as SMTP, POP3, and IMAP [we don’t spell out any of these acronyms (or IP), per glossary], scanning messages as they enter or leave your computer. Other email scanners that integrate into popular email clients offer additional protection by detecting misuse of the client’s features—for example, Microsoft Outlook’s ability to run scripts.

End of Article



Reader Comments

You must log on before posting a comment.

If you don't have a username & password, please register now.




Top Viewed ArticlesView all articles
CES 2009: Ballmer Announces Windows 7, Windows Live, Live Search Milestones

During his first-ever Consumer Electronics Show (CES) 2009 keynote address last night in Las Vegas, Microsoft CEO Steve Ballmer announced the pending public availability of a feature-complete Windows 7, the final version of Windows Live Essentials, and ...

10 Reasons to Deploy Windows Vista

The decision to upgrade your XP systems to Vista is simple when you consider features such as easier backup, a great desktop search, and vastly improved security options. ...

10 Reasons Not to Deploy Windows Vista

The decision to upgrade to Vista has to make business sense, but many companies find the costs in training and application compatibility problems outweigh any benefits Vista brings. ...


Security Whitepapers The Impact of Messaging and Web Threats

Why SaaS is the Right Solution for Log Management

Protecting (You and) Your Data with Exchange Server 2007

Related Events Security Summit

How IE7 & The New Extended Validation SSL Certificates Impact Your Site

Top 10 Email Security Challenges and Solutions

Check out our list of Free Email Newsletters!

Security eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

Related Security Resources Become a VIP member of the Windows IT Pro community!
Get it all with the VIP CD and VIP access. A $500+ value for only $279!

Subscribe to Windows IT Pro!
Solve your toughest technical problems with our experts and access 10,000 + articles online. 30% off

Monthly Online Pass - Only $5.95!
Get instant access to 10,000+ articles from Windows IT Pro Magazine!

TechNet Virtual Labs
Evaluate and test Microsoft's newest products.


Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro Windows Dev Pro IT Job Hound ITTV
IT Library Technology Resource Directory Connected Home Windows Excavator Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 Copyright © 2009 Penton Media, Inc., All rights reserved. Terms and Use | Privacy Statement | Reprints and Licensing