Interesting Article on AV Heuristics

[zigar]

FYI...

"Heuristic technologies can be found in nearly all current anti-virus (herein referred to as AV) solutions and also in other security-related areas like intrusion detection systems and attack analysis systems with correlating components. This article will offer a brief overview of generic heuristic approaches within AV solutions with a particular emphasis on heuristics for Visual Basic for Applications-based malware...."

http://www.securityfocus.com/infocus/1542

[gold eagle]

good link zigar...

[{P²P}Apocalypse]

Very interesting.... Good post.... :D

[micael]

Good post zigar !

And to all other here at AO can I give the advice to add a bookmark for www.securityfocus.com if you not already have done that (also their mailinglist) :D.

~micael

[Vorlin]

Heuristic scanning can be a bit of a pain at times though, as with Panda Software, it looks for "code-matching" and virus header lookalikes (I think). It's a bit paranoid though and labeled 8 files in my Kodak Transfer software for my digital camera as "suspicious". Fortunately, I had auto-rename off.