Some new anti-virus products falling down on behavioral detection
Tuesday, November 24, 2009
With the proliferation of polymorphic malware - which can reconfigure itself in a number of ways to escape signature-based detection - new approaches to virus scanning are critically important. Unfortunately, some commercial virus scanners are still without effective behavioral detection.
Behavioral detection, instead of simply searching for known malware signatures in files and processes, monitors various PC systems for activity consistent with malicious attack, like unauthorized transmission of data or keylogging. The Washington Post reports that one recently released anti-virus detects 99.3 percent of known malware but just 69.2 percent of malware for which there is no known signature.
Heuristic scanning, another next-generation anti-malware technology, is also not up to the task of fully protecting vulnerable computers from the hazards of the internet, though it too shows promise for the future.
Malware is rapidly growing in sophistication and organization, according to experts, and the computer security industry is being forced to play a desperate game of catch-up with the cyber criminals. Numerous high-profile attacks have been launched to coincide with major news events, using their popularity to infect unsuspecting PCs.
Related News:
Cyber criminals exposed medical records - 3.8.2010 More than 18,000 patients, whose medical information is stored on the computer systems of five doctors in Torrance, California, were potential victims of identity theft in September when cyber criminals penetrated the doctors' networks, according to the Los Angeles Times.
McAfee advises companies to boost web security relating to source code - 3.4.2010 At the RSA Conference, currently taking place in San Francisco, McAfee released a report indicating that companies regularly use too few web security protocols when protecting intellectual property such as source code.
False social networking attacks provides teachable moment for web security - 2.25.2010 A unique tool developed to prevent the spread of malware from social networking websites has been recommended Processor.com, a web and network security news provider.
With global web security under siege, exports point to problems - 2.25.2010 In 2009, Garlik, a United Kingdom-based web security company, reported a 207 percent increase in malware use to overtake bank accounts. Recent events have also shown vulnerability in corporate, private and governmental web security systems.
Kaspersky reports malware growing more sophisticated - 2.24.2010 Kaspersky, a web security provider, reported Wednesday that while there is very little growth in the amount of malware currently roaming the web, it is becoming more advanced and much harder to detect.
|