New in protection:
* Improved HIPS (Host-based Intrusion Prevention System) technology assigns a danger rating to unknown programs. The Application Control component uses HIPS to define rules for new and already known applications, which may restrict their access to the file and operating systems.
* Innovative Sandbox technology has been implemented, which uses virtualization to create a secure environment for program execution. New software can be tested in this environment, which isolates the host operating system from all changes. There is no limit to the number of Internet browsers and other applications which can run simultaneously in a sandbox.
* Increased use of Kaspersky Security Network considerably decreases the threat response time, due to information received from other users. The service aims to minimize the time necessary to detect and neutralize new types of threats. When a user starts a program, the service checks it against white lists and Urgent Detection System lists on Kaspersky Lab's servers.
* The protection of personal user data has been extended and enhanced. For instance, Kaspersky Internet Security automatically prevents inadvertent users from accessing known phishing web sites, and blocks keylogger programs, which are designed to steal passwords and access codes.
* The new Script Emulator analyzes the behavior of scripts, to assess their potential harmfulness. It simulates the operation of the Java Script and Visual Basic Script engines, which are supported by default in Microsoft Internet Explorer and are built in to Microsoft Windows.
* The new IM Anti-Virus component ensures the safe operation of most instant messaging applications. The component scans messages for the presence of malicious objects.
* Improvements to the Virtual keyboard component provide safer entry of personal information, by protecting data from being intercepted by spyware and preventing screenshot capture.
* Significant improvements to the Anti-Spam component now provide two methods for detecting spam: exact and expert. Exact methods apply strict filtering criteria to a message, which determine unambiguously whether or not a message is spam. Expert methods investigate email messages that have passed strict filtering criteria. As such messages cannot be unambiguously considered spam, the component calculates the probability that they are spam.
* Components of Kaspersky Internet Security can be temporarily disabled, to improve computer performance. This can be useful during the use of resource-hungry applications such as network games.
* Monitoring access to phishing websites and protection against phishing attacks are performed by scanning links in messages and on web pages, and also by using the database of phishing addresses when an attempt to access websites is detected. You can check whether a web address is included in the phishing database, using the Web Anti-Virus, IM Anti-Virus or Anti-Spam component.
* Improvements have been e to all the application's existing components, including the Firewall, Parental Control, and Anti-Spam components, and particularly the Heuristic analyzer.
* The anti-virus kernel of Kaspersky Internet Security 2011 has been significantly improved, to provide more efficient malware detection. The application shows higher performance on Windows Vista operating systems, as compared to previous versions of Kaspersky Internet Security.
* Kaspersky Internet Security includes the URL scanning module managed by Web Anti-Virus. This module scans links on the web page, comparing the website addresses against its database of suspicious and phishing websites. This module is provided for Microsoft Internet Explorer and Mozilla Firefox browsers as a plug-in.
* The update procedure has been improved. Kaspersky Internet Security's databases are now updated not only according to their schedule, but also when new security threats appear.
* The creation of Rescue Disks has been improved. The service should be used when the infection reaches a level at which the computer cannot be disinfected using either anti-virus applications, or malware removal utilities such as Kaspersky AVPTool. The improved Rescue Disks provide more efficient disinfection because malware programs do not gain control when the operating system is being loaded.