Behaviour blocker
Software that monitors systems/networks for suspect behaviours
Behaviour-blocking software operates by monitoring a system and looking out for suspicious actions being carried out. If an action is attempted which contravenes the blocker's rules, the offending program is blocked from further actions and the user alerted.
Behaviour blockers often run in conjunction with conventional anti-malware software and firewalls, but may come in a standalone form. At the firewall level, behaviour blockers may look for attempts to initiate outbound connections, or to download code. Within the system, suspect actions may include editing the system registry, writing to protected system areas, or harvesting email addresses or password data.
