New security software to lock down memory.

[Kodo]

http://www.eweek.com/article2/0,1759,1607680,00.asp

A small cadre of vendors is set to release a new class of host-based security technologies that protect applications and processes running in memory.

Sandboxing is not a new concept, but I'm not surprised to see it applied to servers at this level.

Originally Posted by Kodo

http://www.eweek.com/article2/0,1759,1607680,00.asp
Sandboxing is not a new concept, but I'm not surprised to see it applied to servers at this level.

Old news for *nix, this has been done by many patches for a while. And many kernels ahve basic features that do this.

[Kodo]

like I said..not a new concept.. however, they are making a version for linux so that would lead me to believe that it is doing something different than what linux is doing natively?

Linux by default has basic fs separation, (while most *bsd's have more complex chroot jails which implement fs and process separation.), many security patches also extensively lock down memory and memory accesses. (As well as process separation in case of Linux.) It's not default install material because it may cause instability.

[Kodo]

so then what could you gather would be the difference in their product as opposed to the native way of "jailing".. ?

Originally Posted by Kodo

so then what could you gather would be the difference in their product as opposed to the native way of "jailing".. ?

I have no idea, doesnt sound very new.