A lot of modern malware prevention focuses on monitoring network traffic. Rather than rely on a single machine to self-report its health, technologies monitor t

A lot of modern malware prevention focuses on monitoring network traffic. Rather than rely on a single machine to self-report its health, technologies monitor the main channel of infection and data transmission, which is communication with the internet. Examples: - FireEye - OpenDNS (where I work) - Palo Alto Networks - ZScalar Case in point - at OpenDNS, we can often identify signs of infection (e.g. communication with DGA domains) before pinpointing the particular malware involved.