中网S3主机安全系统

中网S3主机安全系统，是中网的系列解决方案如桌面安全、终端安全、PC安全、内网安全、全网安全的基础件（基石）。S3是System Security and Safety的缩写。顾名思义，光Security还不够，还需要考虑Safety，即用户本身还要考虑和解决自身行为所带来的安全性。

中网S3主机安全系统，是一款运行在Windows2000、Windows XP和Windows 2003等系统上安全架构，全面防止来自网络的攻击和入侵，对应用进行基于规则的运行控制，实现应用和进程间的域隔离和访问控制，监视系统的资源和运行状况，保护系统及核心资源。

中网S3主机安全系统，主要包括主机状态检测包过滤防火墙、应用和进程的域隔离和访问控制、系统资源和运行状况的监视管理、文件和注册表等系统核心资源的保护等部分，涵盖了传统的防火墙、入侵检测、入侵防御、防网络蠕虫病毒、防流氓软件、防间谍木马恶意软件、主机完整性保护等功能。

中网S3主机安全系统，解决了以下问题：

1、解决流氓间谍木马恶意软件的问题

2、解决系统漏洞特别是零日漏洞的攻击问题

3、解决来自网络上的蠕虫病毒的大规模感染和传播的问题

4、解决既要上网又不安全的最后防线的控制问题

中网S3主机安全系统的产品特点，一是从系统（System）入手来涉及和解决复杂的安全问题，二是按照等级保护的标准（Standards）来设计一款可用满足第三等级要求即安全标记保护级的安全系统，三是简单易用（Simple），不需要用户有安全知识。

中网S3主机安全系统的技术特点是，在自主访问控制（DAC）的基础上增加了强制访问控制（MAC），实现了应用、进程、文件和设备等资源间的域隔离和访问控制，基于规则来实现访问控制，具有一定的可信计算的特点和功能，大幅度地增强了系统的安全性。

System Security and Safety (S3)

S3 GUI

Netchina S3 s target is to discover and block malicious behaviors of any application,

S3 allows you to monitor and control Windows software's behaviors in real-time

and to prevent malicious behaviors from malware and spyware programs.

To achieve this target, S3 implements "4D" defence method, include:

AD: Application Defence

RD: Registry Defence

FD: File Defence

ND: Network Defence

S3 is FREE, that means you could download and use it without any fee.

Features

S3 could track behaviors of all applications already run or being run, and allows you to:

1. trust/untrust an application;

2. decide which application can be run;

3. decide which application can be lunched by another one;

4. decide which application is allowed to lunch another one;

5. decide which application is allowed to install a driver;

6. decide which application is allowed to perform injection;

7. decide which application is allowed to operate specified files;

8. decide which application is allowed to operate specified registry keys;

9. decide which application is allowed/provented to access network;

10. setup low level packet filter firewall rules;

11. turn your PC to stealth mode to avoid port scanning;

12. watch and config autoruns with your OS;

13. control low level disk access;

14. provent keylogger;

15. terminate any target process;

16. setup your own S3 rules;

17. log all you specified behaviors;

18. update S3 online;

19. and more.

Requirement:

CPU: Intel Pentium or compatible;

OS: MS Windows 2000/XP/2003

RAM: more than 256 MB;

HD: more than 100MB free.