How can Ozone stop unknown attacks?
Unlike reactive security products, such as anti-viruses and Intrusion Detection Systems (IDS), Ozone does not rely on constantly updating thousands of bad behaviour signatures in order to keep up with the latest security threats. Instead, Ozone enforces good behaviour of both applications and users. Defining good behaviour is a much easier problem to solve, as both applications and users should only carry out a limited number of tasks. For example, a web server such as Microsoft IIS, would be allowed to list on port 80 and serve web pages but it would not be allowed to execute arbitrary programs or connect to arbitrary computers on the Internet. Enforcing good behaviour provides a much better security guarantee and represents a paradigm shift in the security field.
