RASTABT
1
Oh No! Read on
Microsoft Tests Antivirus Product
'Behavior Blocker' features automatic updates, intrusion detection and prevention.
Juha Saarinen, Computerworld New Zealand Online
Monday, August 02, 2004
Microsoft is alpha-testing its upcoming antivirus product, according to industry sources.
They claim the antivirus software works as a "behavior blocker" that monitors different events and actions on computers. If the event or action is typical of virus or is harmful, it will be prevented.
Behavior blockers do not use code signatures like traditional scanner-based antivirus programs, so they may be able to protect against new types of viruses without being updated--an important consideration for Microsoft.
The antivirus product was also referred to as an Intrusion Detection and Protection System by sources, indicating that it may work in conjunction with the Windows Firewall.
Other Features
An interesting feature of Microsoft's antivirus software is that it is distributed, according to the sources. It communicates with other machines over a secure channel and learns from these. More details on this capability was not available.
Alpha-quality software is not yet ready for release; it is typically not feature-complete and may still have significant bugs. Microsoft has repeatedly said security is a primary focus of future products, including the upcoming Windows update, Longhorn.
Earlier press reports quoted Microsoft's technical head of security in France, Nicolas Mirail, as having shared details of the new program. According to Mirail, the program will reference a regularly updated list of known viruses to check for infections. It will also analyze computers to see if they have been infected by viruses in the past, and attempt to advise users on how big a risk they stand in the future.
Source
Microsoft Tests Antivirus Product
'Behavior Blocker' features automatic updates, intrusion detection and prevention.
Juha Saarinen, Computerworld New Zealand Online
Monday, August 02, 2004
Microsoft is alpha-testing its upcoming antivirus product, according to industry sources.
They claim the antivirus software works as a "behavior blocker" that monitors different events and actions on computers. If the event or action is typical of virus or is harmful, it will be prevented.
Behavior blockers do not use code signatures like traditional scanner-based antivirus programs, so they may be able to protect against new types of viruses without being updated--an important consideration for Microsoft.
The antivirus product was also referred to as an Intrusion Detection and Protection System by sources, indicating that it may work in conjunction with the Windows Firewall.
Other Features
An interesting feature of Microsoft's antivirus software is that it is distributed, according to the sources. It communicates with other machines over a secure channel and learns from these. More details on this capability was not available.
Alpha-quality software is not yet ready for release; it is typically not feature-complete and may still have significant bugs. Microsoft has repeatedly said security is a primary focus of future products, including the upcoming Windows update, Longhorn.
Earlier press reports quoted Microsoft's technical head of security in France, Nicolas Mirail, as having shared details of the new program. According to Mirail, the program will reference a regularly updated list of known viruses to check for infections. It will also analyze computers to see if they have been infected by viruses in the past, and attempt to advise users on how big a risk they stand in the future.
Source
