Reply to thread

Message

<blockquote data-quote="ichito" data-source="post: 872004" data-attributes="member: 15835">Simply saing...that fact is not important. Not in aplication like MD or in wider sense like HIPS/monitors, anti-exe, restriction policy/isolation/virtualisation and firewalls...and even backup apps. Shortly describing...malware detection is based in general on 3 questions:- who?...it applies to most commonly used apps like AV and its signatures that discribe dangerous objects- how?...it applies to behavioural monitoring/analisys where the most important matter is - is detected action suspicious/dangerous or not?- where and what?...it applies to apps like HIPS that try to answer what object is trying to access some specified and vital parts of system/data/devices.Core objects in supported system are precisely pointed and still the same (more or less) so is not important how old is security app if its work is done still on high level. Signatures are useless in this case.</blockquote>

[QUOTE="ichito, post: 872004, member: 15835"] Simply saing...that fact is not important. Not in aplication like MD or in wider sense like HIPS/monitors, anti-exe, restriction policy/isolation/virtualisation and firewalls...and even backup apps. Shortly describing...malware detection is based in general on 3 questions: - who?...it applies to most commonly used apps like AV and its signatures that discribe dangerous objects - how?...it applies to behavioural monitoring/analisys where the most important matter is - is detected action suspicious/dangerous or not? - where and what?...it applies to apps like HIPS that try to answer what object is trying to access some specified and vital parts of system/data/devices. Core objects in supported system are precisely pointed and still the same (more or less) so is not important how old is security app if its work is done still on high level. Signatures are useless in this case. [/QUOTE]

Verification