Check Point claims its ZoneAlarm ForceField security product, which is set for release later this month, will not only protect against iFrame attacks, it also allows users to discretely view porn or "buy gifts" without getting caught.
Jordy Berson, Check Point's US group product manager, told ZDNet.com.au that ForceField creates a virtual environment for either Firefox or Internet Explorer.
"Essentially, you put the computer into a virtual safe environment so that any changes done on the computer are done in a sandbox," he said.
Drive by download attacks have become the most frequent method of infection, with cybercriminals targeting either flaws in browsers or Web-applications — such as Flash or QuickTime — to compromise a system.
"[Forcefield] works no matter what threat — even zero hour threats," claimed Berson.
Want to know more?
For all the latest news, analysis and opinion on security, click here
ForceField contains a mixture of signature and behavioural defence mechanisms, such as the NetCraft anti-phishing database, as well as ZoneAlarm's community-based feedback mechanism, to detect and define malicious files.
Berson claims that ForceField can also scuttle keyloggers.
"Malware gets on the computer and starts executing files and if it turns out to be a keylogger and screen grabber, as soon as it starts to log key strokes we try to jam the system," he said.
"The malware will think it is logging key strokes but it will only come up blank."
ForceField also comes with a special "private browser" button, allowing users to surf the Internet freely without have sessions recorded.
"From the moment you launch it, any site you go to will not be recorded on that computer," he said.
A beta version of the software is available for download, but Check Point warns: "Do not contact the Technical Support Department for any issues you encounter with this technical Beta."
"even zero hour threats"
and
"ForceField contains a mixture of signature and behavioural defence mechanisms, such as the NetCraft anti-phishing database, as well as ZoneAlarm's community-based feedback mechanism"
Those two statements are contradictory. It's logically impossible to counteract zero-hour exploits via a "community-based feedback mechanism". And "signature and behavioural" mechanism are easy for hackers to work around, assuming they have access to the details of the algorithms (which they naturally will, since they have access to the software itself).
Either Forcefield does something *else* that was not reported in this article, or it cannot protect against "zero-hour" threats.