3 ms·
Antivirus software normally matches code patterns to well-known pattern database. It does not investigate the code on the client machine. AV software houses run
by LeoNatan25 7y ago
Antivirus software normally matches code patterns to well-known pattern database. It does not investigate the code on the client machine. AV software houses run their own labs, where emulation is used to inspect suspected malicious code.
- staticassertion 7y agoTo my knowledge every single major AV packages a local emulator. We have long, long moved beyond a world where AV does basic pattern matching. Frankly, I am far less concerned with the js interpreter than I am the rest of the codebase. http://computervirus.uw.hu/ch11lev1sec4.html http://computervirus.uw.hu/ch11lev1sec4.html https://www.blackhat.com/presentations/bh-europe-08/Feng-Xue/Whitepaper/bh-eu-08-xue-WP.pdf https://www.blackhat.com/presentations/bh-europe-08/Feng-Xue... http://joxeankoret.com/download/breaking_av_software_44con.pdf http://joxeankoret.com/download/breaking_av_software_44con.p...