Testing of “ Dynamic Detection ”

As malicious software threats have changed, the anti-malware products have had to evolve, too. Simple signature-based detection proved to have downsides when having to deal with thousands of new malware samples daily. It takes time to process a sample and make a signature available. In the meantime a customer’s system remains completely unprotected from that particular threat. Hence heuristic detection was introduced. This technique also performs static scanning of malware, but doesn’t rely on signatures: instead, more generic patterns and techniques are applied. However, success of this technique isn’t always guaranteed, so again, some more sophisticated approaches are needed to detect and block malware. An example is the so called shields feature which monitors certain system areas and hook points for suspicious changes or actions.