HIPS vs. Behavior Blocking: Which is Right for You?

HIPS (Host Intrusion Prevention System) monitors each activity a program attempts and (depending on configuration) prompts the user for action or responds based on pre-defined criteria. Conversely, a behavior blocker monitors and profiles whole program behavior. When a collection of behaviors tips the scale, the behavior blocker will (depending on configuration) alert the user or take action against the entire program based on pre-defined criteria. While they sound similar, HIPS is application-level control (i.e. this program is allowed to do X but not Y), whereas behavior blocking is more cut and dry - the entire application is either good or it is not. Both approaches have their merits. To determine which might best suit your needs, see HIPS vs. Behavior Blocking.