Where Anti-virus Technology To Cloud From The Active Defense To Security - Virus Software, Office

From the world's first computer viruses began

, a virus program and protracted struggle between antivirus software had started. Virus technology continues to develop, are also constantly upgrading anti-virus technology.

Early in the preparation of the virus or technical jobs, anti-virus engineers are busy extracting virus signatures, anti-virus software, virus, added to the database, updates about, even if the bin, which is the traditional signature scanning technology . Even if the virus was later learned to develop a wide range of variants, anti-virus engineers have only to find out from the common variants, such as the number of non-sequential code, in order to identify the general characteristics of the same type of virus extracted from the so-called "broad-spectrum signature", not too much effort contributions. All along, this signature scanning technology as the most effective and most reliable anti-virus technology as the foundation technology for a variety of antivirus software up to now is still the major anti-virus technology.

But with the rapid development of the Internet, viruses also have developed faster and faster: virus technology has improved continuously, the spread of the virus means more and more diverse types and quantities of the virus are more and more. This case, the traditional signature technology has been insufficient to deal with, after all, an expansion of anti-virus software vendors can not keep up the speed of the virus database on the Internet to write millions of virus production rate of the virus, but it also has inherent lag weaknesses. How to prevent large numbers of new viruses every day, so some of the new anti-virus technology came into being.

Active defense 2007 antivirus software vendors enthusiastically participated in the concept of active defense, but some manufacturers may call it active defense, and some called behavior detection or any other new terms, but their common feature is to guard against unknown viruses, so we can be understood as different from traditional signature scanning technology, and to actively detect and block unknown threats, defense techniques. This understanding of active defense is a broad concept, such as some manufacturers Heuristic virus scanning technology, or virtual machine virus scanning technology, even the firewall, registry monitoring so on operators in the active defense.

The narrow sense of active defense, is the behavior-based detection of anti-virus technology, through the behavioral characteristics of the virus to determine whether treatment for the virus and the virus acts to block the technology. The technology by extracting common features of computer viruses, such as modifying the registry, self-replication, and constantly connected network, comprehensive behavioral characteristics of these viruses to determine whether the virus. That is the behavior of the whole monitoring process, if found "illegal" behavior, to notify the user, or directly to terminate the process.

Active Defense Technology but the biggest drawbacks is that there is a large easily lead to false positives or manslaughter, and some anti-virus software active defense function is given the report, require the user to judge to decide operation, which some knowledge of computer security users want, not practical.

Heuristic Heuristic is "the capacity of self-discovery" or "a certain way or method used to determine the knowledge and skills of things" is anti-virus software to analyze

File Logical structure of the code feature for malicious programs, or through a virtual environment, proactive security implementation of the code to determine whether there is malicious behavior. This one, inspired by former is known as static, which is a dynamic inspiration.

Inspired technology somewhat equivalent to the static spectrum signature technology, refers to the static state of order by the typical features of HIV virus identification method is a complement to traditional signature scan. As the virus and the normal application procedures have many differences, such as an application is usually the first command, is to check whether the parameters of command line input items, clear screen and save the original screen display, while the virus program is usually the first direct instruction the write operation, decodes the instructions, or search for a path of the executable instruction sequences and other related operations, according to which the difference between inspired to set up a special feature database, thus can be a simple-compile, run virus programs without case, check the virus-related sequence of instructions to determine whether the virus.

And dynamic inspiration and virtual machine technologies more closely, by killing the soft built-in virtual machine technology to run the virus to build a simulation environment to induce the virus to kill the buffer to run the simulation software, such as running processes detected suspicious movements, and is determined to intercept a dangerous procedure. This approach also helps to identify unknown virus, the virus is still on the packers and effective, but if not properly controlled, there will be more false positives. Moreover, the dynamic resource usage inspired to consider the issue because, so it can only use the more conservative of the virtual machine technology. At present, the dynamic heuristic is mainly used in flower instructions on virus scanning and killing.

by: gaga

POST COMMENT

Agile Development a Growing Trend in Software Design Golf Swing Software-the Benefits For Amateur Golfers Singapore Payroll Software System Basic & Requirement Software and Applications That Will Simply Revolutionize Your World Does Hard Drive Recovery Software Helps? Super-terrorist! Cosmetic Surgery Of The 10 Amazing Facts - Cosmetic Surgery, Plastic Surgery - Help Desk Software Using Currency Trading Simulation Software The Best Way To Learn German With Software Hard Drive Recovery Nj How To Stop Error '0x0000007a' How PalmTungsten E2 Software Revolutionized Handhelds How Software Is Developed? Asp.net Development: A Prominent Solution For Software And Web Development