4 ms·
How one gets into anti-malware/virus business nowadays? I mean, e.g. you have to get a signatures database somewhere - are these available on the market?
by zerr 11y ago
How one gets into anti-malware/virus business nowadays? I mean, e.g. you have to get a signatures database somewhere - are these available on the market?
- Eridrus 11y agoVirusTotal is a good start if you're willing to fork out $$. After that you can find companies who will sell you feeds. After you've up and running on people's computers there are sample sharing agreements between AV companies, but you need to have something of your own to share before they're going to give you theirs.
- TACIXAT 11y agoYou can get ClamAV's database files. Though most AVs are cloud based now. They store the hash database online and the clients just query it. Most integrate sandboxes with heuristics for malicious behavior (for unseen samples) and machine learning on previously malicious samples to create rules for new detections. Most will also monitor network traffic and have rules for detection there too.
- greggarious 11y agoThat seems like a terrible idea... hashes are small, and I should be able to run an AV scan without connecting to the net.