COMODO Internet Security wiki

From Software Informer

Comodo Internet Security (CIS), developed by Comodo Group, is an all-in-one internet security suite available for Microsoft Windows XP and Vista. Comodo Internet Security currently includes a firewall, a HIPS, antivirus software, and buffer overflow protection on all applications. All CIS components are optional when installing allowing the user to choose which components they wish to install. The components can be activated/deactivated by user preference.^[1] The standard version is available as a free download. There is also a paid professional version available, which includes TrustConnect and online support.^[2]

[edit] Layered Security

Comodo Internet Security was designed around the concept of layered security^[3], by integrating components designed to prevent intrusions upon a computer system (the Firewall, Defense+, and Memory Firewall), with components designed to resolve any intrusions which the other components miss. (Currently the antivirus component, with plans to integrate Comodo's anti-malware program BOClean^[4]).

[edit] Firewall

Comodo's Firewall generally wins high scores on Firewall testing sites, such as Matousec, and has regularly been included in the top three firewalls.^[5] The firewall component has been declared Editor's Choice by PC Magazine^[6] and Gizmo's Tech Support Alert^[7].

[edit] HIPS (Defense+)

Comodo's HIPS (host intrusion prevention system), known as Defense+, is designed to provide protection against unknown malware. It is designed to restrict the actions of unknown applications, and restrict access to important files, folders, settings and the Windows Registry. Defense+ employs Default Deny ^[8] Protection, by default refusing any unknown file permission to install or execute except when specifically allowed by the user or when the file appears on Comodo's whitelist.

[edit] Antivirus

Comodo's Antivirus was publicly released along with the Comodo Internet Security Suite on October 23, 2008^[9]. As of CIS 3.8, it does offer a heuristics engine built into the scanner.

[edit] Memory Firewall (Buffer Overflow Protection)

Comodo Memory Firewall, integrated in CIS 3.8, is designed to protect against buffer overflows and the infamous Return-to-libc attack. The memory firewall protects all applications.^[10] Comodo Memory Firewall detects buffer overflows occurring in the STACK and HEAP memory, as well as ret2libc attacks and corrupted/bad SEH Chains.^[11] This buffer overflow protection is part of Comodo's prevention layer in the security suite. The need for BO protection is ever increasing due to their increasingly common use in computing to exploit end users.^[12]

[edit] ThreatCast

ThreatCast is a community-based advice system, which gathers information about decisions other users have taken, regarding certain actions on a user's computer. These statistics are then displayed in Alert windows, giving the user an idea as to whether the action is safe, or dangerous. There was a known bug where Threatcast failed to show alerts for certain programs. A staff member has reported it as fixed^[13], but some people are still having trouble^[14].

[edit] Criticism

A common complaint about Comodo Internet Security is the excessive number of alert windows displayed.^[15] The latest version has implemented a whitelist^[16] in an attempt to reduce alerts for trusted applications. Furthermore it is near to impossible for mainly-keyboard users (e.g. the accessibility-challenged) to respond to alert windows via keyboard shortcuts.

[edit] Photo Gallery

Summary of CIS

Antivirus Alert

[edit] References