I recently came across a special virus which only operated physical harddrive to destroy MBR. As a consequence, all the user data were completely lost. What should we do to prevent this from happening again using Host IPS? Can Host IPS help to prevent a program from direct operation on physical hard drive?
You can access the following links for the online analysis of the virus behavior and see if Host IPS can help preveting that.
Thank you for your help.
on 11-5-1 上午06时38分59秒
Can Host IPS help to prevent a program from direct operation on physical hard drive?
I'm not aware of any functionality like this for the Host IPS product.