3 ms·
In which case the zero day isn't a real excuse. If you aren't checking for specific exploit code signatures then if a particular exploit is an unknown zero day
by excuse-me 14y ago
In which case the zero day isn't a real excuse.
If you aren't checking for specific exploit code signatures then if a particular exploit is an unknown zero day or not doesn't matter.
Perhaps it's time to switch back to Harvard architecture. Programs and data are separate - you can't change program codeand you can't execute data.
- CWuestefeld 14y agoIn which case the zero day isn't a real excuse. 0-day exploits aren't the problem. You're focusing on just one type of malware behavior. Even if all of our software today was free of exploits, it wouldn't do anything to stop the bad guys from building trojan horses, and using that to bootstrap into broader pwning.
- dmak 14y agoYou say it as if checking for signatures it the ONLY effective method and you seem to be saying it's not that effective, so all AV's are useless. Well, it's not the only method and there are other effective methods.