5 ms·
Constant monitoring for known exploits? Aren't you just describing an antivirus?
by ghostly_s 10y ago
Constant monitoring for known exploits? Aren't you just describing an antivirus?
- Karunamon 10y agoMore like a vulnerability scanner. Signature based antivirus apps are mostly useless nowadays, but being able to tell me I'm running a broken version of OpenSSL is very useful.
- typicalrunt 10y agoThreatstack will do that. Their agent runs on your machine as a kernel mod and will alert you to any libs being used (e.g. openssl, libcurl) whose version matches a known CVE.
- fizzbatter 10y agoAlso, beyond what Karunamon mentions, i want to scan my network, my IoT devices, etc. Besides, virus scanners are heavy and ugly, i've always hated them. Sure, it's nice to have monitoring of a breech, but why do i have to sit with holes in my security waiting for a breech? Some virus scanners try to monitor downloaded files or weird behavior etc, but i'd much rather scan my computer for holes, than things that have already exploited the security vulnerabilities that i had open.