Antivirus programs are for most users the first line of defense against any electronic threat. They run continuously in the background and monitor every function of other programs, warning the user whenever they detect something suspicious.
However, an antivirus program alone cannot limit the action of all viruses on the Internet! It is generally accepted that electronic threats are constantly mutating in order to bypass all user protection measures. But how do companies that produce antivirus programs adapt to the new data?
since 1986, when the first virus that could infect personal computers. Malware is now created to make money for its creators in any way possible, while security software companies adapt their programs to new threats.
Anti -virus programs in their early years worked with a virus detection engine trying to protect users' systems. As the number and "resistance" of malicious programs grew, new technologies were incorporated that could be more effective in dealing with them. Thus, most security software companies, in order to strengthen their programs:
- They have incorporated virus detection technologies (heuristics). These technologies can detect new viruses that have not yet been discovered and recorded (signatures), according to the company.
- They increased the rate of program updates with more updates. The antivirus program not only frequently updates the virus signatures (signatures update) but also updates its "parts" (modules update) at regular intervals.
- Development of more sophisticated Firewalls. Simple antibiotics were replaced by "security suites" that, in addition to an antibiotic, have an advanced "firewall" that controls incoming and outgoing traffic. The two models work together harmoniously with better results for the user.
- They integrated a second virus detection engine. (2 in 1 antibiotics). The result, of course, is to increase the virus detection rate, a fact that of course has the corresponding "price" in terms of system resource consumption.
- They added HIPS (Host Based Intrusion Prevent System) technologies . The program now protects vital system files (hosts).
- They incorporated the sandbox technique. Revolutionary technology that executes (malicious) programs in a protected area of the computer.
The war between viruses and antibiotics seems to be intensifying in the future as virus writers look for more vulnerabilities in users' operating systems. On the other hand, antibiotics will try to stay "up to date" in the new environment that will be formed each time. We warmly thank SecTeam member @Trojan.
