Re:What about false positives? (Score 1)

It has a very low false positive rate, and can be configured to prompt the user for each behavior, if that's desired. Most of the behaviors it stops are never benign, anyway. Keyloggers, mailing to every address in the address book, buffer overflows, self-modifying code, etc. Read more about it at http://www.cisco.com/en/US/products/sw/secursw/ps5 057/