How Anti-Virus Works (Some techniques)

Dubseven

Level 14
Verified
Aug 12, 2013
694
Some infos, to precise in my opinion:

- You can't made an security product with only VB NET. You must be able to be very great on MySQL, databases (mysqli or mysql), in security, in PHP and database exchanges, in C# and Kernel, and a little in AutoIt to complete your security systems.
You can't made a "strong" security software only with one language.

- The kernel use and PE and HEX reads are very important. You must be very strong in this points. If not, it's useless to start a project. This is the basics of a security product.

- NEVER ready only. Read, applicate and write always. (programers will understand).

- Never use MD5, Sha or any other file signature only method to detect a malware !
This can be changed very very easly.

- Be very carrefull with the memory (ram) usage. Only reading your database result can use more than 500 MB of Ram (very high).

- Never scan a file in modification. Only in creation. Or you will block the file.

- Be ready to work 24h more than 3 years minimum to get a antivirus like ClamAV running without bugs (from zero).

- Be very carrefull with the behavior (heuristic). This can made much of FP.



In other case, you must have much of motivation, much of time and much of knowledge and you must be strong and ready for insults to your work and many criticism.
If you can't, just don't start for nothing.

Also, a big point: ALWAYS secure your connections and your computer. If anything from your program is hacked or your program cracked, all your work will be for nothing and you will lose all.

Thanks for reading :p
 
  • Like
Reactions: Cowpipe

Behold Eck

Level 15
Verified
Top Poster
Well-known
Jun 22, 2014
720
Some infos, to precise in my opinion:

- You can't made an security product with only VB NET. You must be able to be very great on MySQL, databases (mysqli or mysql), in security, in PHP and database exchanges, in C# and Kernel, and a little in AutoIt to complete your security systems.
You can't made a "strong" security software only with one language.

- The kernel use and PE and HEX reads are very important. You must be very strong in this points. If not, it's useless to start a project. This is the basics of a security product.

- NEVER ready only. Read, applicate and write always. (programers will understand).

- Never use MD5, Sha or any other file signature only method to detect a malware !
This can be changed very very easly.

- Be very carrefull with the memory (ram) usage. Only reading your database result can use more than 500 MB of Ram (very high).

- Never scan a file in modification. Only in creation. Or you will block the file.

- Be ready to work 24h more than 3 years minimum to get a antivirus like ClamAV running without bugs (from zero).

- Be very carrefull with the behavior (heuristic). This can made much of FP.



In other case, you must have much of motivation, much of time and much of knowledge and you must be strong and ready for insults to your work and many criticism.
If you can't, just don't start for nothing.

Also, a big point: ALWAYS secure your connections and your computer. If anything from your program is hacked or your program cracked, all your work will be for nothing and you will lose all.

Thanks for reading :p

Oh Dubseven, so it is really that easy then ?

I think I just might knock out a couple of new antivirus products for next week, when I have a couple of days off work.:cool:

Regards Eck
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top