2

As part of Avast free updates you have a chance to use SafeZone browser. Among features of SafeZone browser I found that SafeZone protects you from keyloggers/malware/spyware.

I'm interesting especially at keyloggers protection and how SafeZone manage to achieve it?

Also what did they ment by malware/spyware protection? Cannot I achieve the same with anonymous mode in Chrome?

5

Anonymous Mode does not protect you from malware. It simply deletes cookies/browsing history/etc. after you close the window.

Unlike Anonymous Mode, SafeZone works like a virtual machine whose only function is browsing the web. If you were to encounter any malware while browsing, it would be contained within the SafeZone "VM."

As for how it protects against keyloggers: It detects them by looking for signatures and hashes that match known keyloggers. Additionally, SafeZone "prevents keyloggers and network-based eavesdropping from capturing any of your data," meaning that if you have any keyloggers on your machine(or other info-gathering malware), they should not be able to tell what you are doing in SafeZone. A hardware-based or low-level keylogger could log your keystrokes before SafeZone can secure them.

  • 2
    right, but AFAIK another browsers doesn't protect you from keyloggers. Do you know any reasons why SafeZone protects but another don't? – VB_ Feb 10 '16 at 16:10
  • also may you provide more details about SafeZone VM? – VB_ Feb 10 '16 at 16:12
  • They do, but other products - such as BitDefender's SafePay - don't advertize it like Avast does. Another alternative is Sandboxie. But, Sandboxie isn't necessarily a PSP, so it doesn't check for hashes and signatures against a database. – Lutefisk Feb 10 '16 at 16:17
  • How does this protect against an existing key-logger? – Neil Smithline Feb 10 '16 at 17:41
  • Maybe you should mention this restriction in your answer. I think you're saying that all safe zone does to fight key logging is signature checking of known key loggers. Sounds similar to AV to me – Neil Smithline Feb 10 '16 at 17:48
1

SafeZone protects against keyloggers by sending your keystrokes directly from 'your keyboard' to SafeZone. This way a (malicious) windows application shouldn't be able to intercept it.

However, note: that if you're infected with a low-level keylogger, or even one on hardware-level SafeZone can't protect against this because in that case the keylogger intercepted your keystrokes even before SafeZone had a chance of using it's security-mechanism on it.

Protection against keylogging is a mouse-and-cat game between the protector and hacker. The one which is able to protect/log the keystrokes the lowest on the system (hardware-level) wins. Unless signature-based detection or something similar is used of course.

Avast Safezone is a sand-boxed browser. A sandbox is a security mechanism who often by virtualization (note: 'Virtual' Machine) separate running programs from each other. You can compare it with a virtual machine. This way malicious software on your host system (A) can't affect the other processes running in your sandbox/VM (B). Unless it's wrongly configured or exploits are found.

That browser also contains add-ons and special configuration to 'harden' it. You can also 'harden' Google Chrome a bit by using these add-ons and configuration which is a good practice to do and will protect you against some dangers. But you won't be protected against malware, and other things which SafeZone protects you against. Also note that incognito-/anonimity-mode does not protect you against anything. It only makes sure your history and cache is not saved in the browser, yet, it'll be saved on other places probably like e.g your DNS-cache.

  • How does sending your keystrokes from your keyboard to another application protect you from keylogging? – Mark Buffalo Feb 10 '16 at 16:21
  • 1
    @MarkBuffalo: The info in my post is from Avast's user-manual. I couldn't find a technical explanation. A way I should do it is by (1) generating a key unique for each user, (2) use that key to encrypt the keystroke low-level ("directly from keyboard"), (3) if a windows application intercepts, they only see encrypted garbage (4) only SafeZone is able to decrypt the garbage because it has the generated key. (5) Display decrypted keystroke in browser. – O'Niel Feb 10 '16 at 16:25
  • @MarkBuffalo If you already had a keylogger on your system, it wouldn't. But I'm guessing that was a rhetorical question? – Lutefisk Feb 10 '16 at 16:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.