Exploit Prevention in software

There's been a lot of talk about hardware enforced DEP as a mitigating factor in some of the exploits in the last six months. There's also a new software product that can limit the impact of zero-day exploits. The software is for windows and is called SocketShield. Suzi at Spyware Confidential has taken it for a testdrive on an unpatched XP system through some nasty exploit sites....

It sounds as though socketshield fared fairly well, preventing some exploits. It did not prevent unprompted download/install of some adware, but seemed to be effective at stemming the tide and not allowing some of the trojans/keyloggers and spyware downloads that she mgiht usually get visiting the same site. The product will retail for $29 for a years worth of updates if I understand correctly.