anti virus techniques jordan & ryan use of checksum the binary for key files is added up to a...

5
Anti Virus Techniques Jordan & Ryan

Upload: rudolph-cameron

Post on 23-Dec-2015

212 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Anti Virus Techniques Jordan & Ryan Use of Checksum The Binary for key files is added up to a number especially in the boot files When these files are

Anti Virus Techniques

Jordan & Ryan

Page 2: Anti Virus Techniques Jordan & Ryan Use of Checksum The Binary for key files is added up to a number especially in the boot files When these files are

Use of Checksum

• The Binary for key files is added up to a number especially in the boot files

• When these files are called up to do a checksum they are cross referenced with what it should be

Page 3: Anti Virus Techniques Jordan & Ryan Use of Checksum The Binary for key files is added up to a number especially in the boot files When these files are

Searching for virus signature • A virus signature is a unique pattern of

bits within a virus• The problem with this is that your

antivirus software needs to know what it is looking for or else it will go unnoticed as it scans for a specific number

• This is why software needs to be regularly updated as new codes are added all the time

Page 4: Anti Virus Techniques Jordan & Ryan Use of Checksum The Binary for key files is added up to a number especially in the boot files When these files are

Heuristic Detection

Heuristic detection is a method of finding viruses.

Heuristic detection is a less precise method of virus detection

than any of the others in this section, heuristics allow rules to be set up to detect new viruses that they have not seen before.

Page 5: Anti Virus Techniques Jordan & Ryan Use of Checksum The Binary for key files is added up to a number especially in the boot files When these files are

Memory Resident Monitoring• This software loads into the

computer when it is started up and stays in the computers memory until it is shut down again.

• May slow down running of programs BUT viruses will be always be detected