RE: COmpare Firewalls

["Kertesz, Imre" <ikertesz () ASEC-MD2 COM>]

There has been some good discussion recently on the notion of
Application Sandboxing, where rather than monitoring for identifyable
threads, application behavior is monitored at the process level.
Actually, Sir Dystic of CdC fame and author of the original Back Orifice
is supposedly coding a demo of this concept. He has some good
explanation on his WinAPI page:

http://www.cultdeadcow.com/~sd/windoze.html

Cheers - I

> -----Original Message-----
> From: Dameon D. Welch [SMTP:dwelch () best com]
> Sent: Tuesday, September 07, 1999 2:06 PM
> To:   joe () joesnet com
> Cc:   firewall-wizards () nfr net
> Subject:      Re: COmpare Firewalls
>
> On Tue, Sep 07, 1999 at 09:06:20AM -0700, Joe Ippolito wrote:
>
> > So you know of something that will protect an OS and is not an
> application?
> > Hmmmm?