10:57 Lies big lies and antivirus software Part One "But they first began!» | |
| This article, I begin a series devoted to some aspects of the so-called "anti-virus industry, which I hope will be interesting not only for me. For the umpteenth time we are afraid of horror stories in the style of another virus around the world sold millions of copies. We shall all perish! ". Here are just reading another peppy press release of the next producer of another anti-virus tools, perplexed. How so? We are so reliably protect so thoroughly: there are signatures and heuristics, and even a squeak-season-going behavior analysis. Then what ... people are still infected? Where the epidemic? Are modern antiviral agents are effective? The first anti-virus emerged in the area in 1985 as a response to the first file virus infects executable files and interpreted and working in the medium MS DOS. Who else remembers this is such a single-tasking operating system, where its core applications and worked on the same level of privileges. And it turned out to be anti-virus software on this platform, most efficient tool to combat viruses, and how to cure those already infected machines, and prevent infection. Viruses spread slowly, on a diskette, from user to user, and the signatures to catch and treat, much faster through the network (BBS, NNTP, ...). It lasted long enough to around the early 2000 (that is, fifteen years at least), when there were three fundamental changes fundamental change in the number one: come to us online. So Wednesday, the spread of viruses was the same as the distribution of signatures. Proactive anti-virus on the virus has been reduced to zero. Radical change number two: instead of operating systems based on MS DOS (and this, too, the whole line Win1.xx-Win3.xx, Win95/96/98/ME) on the desktop it's the Windows NT kernel in the implementation of Windows 2000 / XP. Now the kernel of an operating system, its code and data, securely separated from the address space of regular programs. Fundamental change in the number three: viruses are now written for profit. Moreover, this "virus", in fact, have disappeared from the computer inhabitants. They were replaced by all sorts of worms, "Trojan horses", "blockers" and other vermin, focused on getting money. It is a cardinal change of number three is connected first strong failure of the antivirus industry, anti-virus could not cure already infected with Trojans machine. Here are file-infecting-plenty, and when the executable modules are being introduced into the operating system does not. In this whole industry has grown "anti-malware". All those who still remember names such as Spybot Search & Destroy, Ad-Aware, SpySweeper, I think, no need to explain anything. I must say that anti-virus industry has quickly realized that money is running out of their hands and fast enough to catch up. That's only because of a fundamental change in the number one level of prevention of infection has fallen below any criticism. Antivirus disastrously late. And do not save, neither heuristics nor behavior analysis. Zlovredopisateli bypass everything. In this case, in all forums periodically float theme in the style of "anti-virus A infection missed it bad. Recommend a good ". Rights, Council of "good", which remains in this status until the next pass. After which the cycle finding a "good anti-virus" is repeated. This raises a paradox-new technology to prevent contamination created by "a radical change in the number two" and showing absolute results in tests for the prevention of infection (so-called "dynamic tests") can not make his place in the sun, because come the market quite late. Inertia consciousness of the vast number of users simply does not allow them to search anything "to protect" other than anti-virus. Identically equal protection antivirus. Point. "We need protection. Recommend a good antivirus. Familiar? But antivirus software is not the best in the problem of prevention of infection! Simply, they first started! P.S. The next part | |
|
| |
| Total comments: 0 | |