In simple terms, antivirus engine is a judgment of a specific program behavior is a virus program ( including questionable ) technology mechanism. Antivirus software antivirus engine is the main part of. Is to detect and discover the virus program. While the virus is the virus specimens have been found. With the virus database of specimens to control machines in all programs or files, is it right? Look with these specimens, are a virus, it is not necessarily a virus ( because there are many was not found or just produced virus ).
Antivirus engine work steps
Based on the mechanism of rule engine:
This section represents the antivirus engine quality level, a good anti-virus engine should be able to find a lot at this link or a considerable size of the virus, thus avoiding entering the next link of judgement. This process is called antivirus engine core layer.
( Note: at the time of scanning relies on the analysis of program behavior to find the virus is heuristic to check poison, now is mainly inspired by the engine rather than antivirus engines to do )
The individual thinks, now antivirus engine effect is not large, it is more useful inspiration engine.
No comments:
Post a Comment