In general, the virus are:
Detection using virus signature database (virus signature database): How the virus is an approach that is widely used by traditional antivirus, which is looking for signs of the presence of the virus by using a fraction of the virus code that has been analyzed by antivirus vendors, and has dikatalogisasi according to type, size, power breakdown and several other categories. This method is fairly quick and reliable way to detect viruses that have been analyzed by antivirus vendors, but can not detect new viruses until the virus signature database into the newly installed system. Virus signature database can be obtained from the antivirus vendor and can generally be obtained for free via download or through a subscription (subscription), and / or
Detection by looking at how the virus works: It works like this antivirus is a new approach borrowed from the technology applied in Intrusion Detection System (IDS). This method is often referred to as a Behavior-blocking detection. How to use the policy (policies) that must be applied to detect the presence of a virus. If there is a software behavior that is "unnatural" according to the policy being applied, as well as software that tries to access the address book to send out a mass e-mail to the e-mail list that is in the address book (the method is often used by virus to transmit the virus via e-mail), then the antivirus will stop the process carried out by the software. Antivirus can also isolate the codes administrator suspected virus to determine what to do next.
The advantage of this method is the antivirus can detect new viruses that have not been recognized by the virus signature database. The downside, obviously because antivirus software to monitor how the overall (not monitor file), then the antivirus makes frequent false alarms or "False Alarm" (if the antivirus configuration is too "hard"), or even allow the virus to multiply in the system (if antivirus configuration is too "soft"), false positive occurs. Some manufacturers refer to this technique as a heuristic scanning. Heuristic Scanning Technology has progressed so far that now. Some antivirus check a file with the usual definition. If the usual escape detection, then the file is run in a virtual environment. All changes made to the file is a virus, then the user will be warned.
Subscribe:
