Browse Definitions :
Definition

virus signature (virus definition)

A virus signature (also known as a virus definition) is a file or multiple files that are downloaded by a security program to identify a computer virus.

The files enable detection of malware by the antivirus (and other antimalware) software in conventional file scanning and breach detection systems.

Researchers at antivirus firms study viruses found commonly on the internet, often testing their behavior in a sandbox-type set up. The sandbox is generally a virtual machine-based environment. The behavior, file names used and unique strings of data in the files are all analyzed.

Commercial antivirus utilities have long depended on virus definitions. Security software frequently downloads the files to keep the software able to detect current threats. The files are used to update criteria for detection of files in hard drive scans and checks on running processes. The main weakness of virus signatures is in detection of new viruses.

Another method of virus detection is the use of heuristics. In these systems, antivirus programs use algorithms to detect the behavior patterns that were found when a specific virus was tested by researchers. Strong heuristics are becoming increasingly important because of advanced persistent threats, which conceal themselves through encryption to evade detection by typical scans. Metamorphic and polymophic viruses, which change their code in propagation, also hide malicious software from conventional scanning processes.

This was last updated in January 2017

Continue Reading About virus signature (virus definition)

SearchCompliance

  • information governance

    Information governance is a holistic approach to managing corporate information by implementing processes, roles, controls and ...

  • enterprise document management (EDM)

    Enterprise document management (EDM) is a strategy for overseeing an organization's paper and electronic documents so they can be...

  • risk assessment

    Risk assessment is the identification of hazards that could negatively impact an organization's ability to conduct business.

SearchSecurity

  • whaling attack (whaling phishing)

    A whaling attack, also known as whaling phishing or a whaling phishing attack, is a specific type of phishing attack that targets...

  • cyber attack

    A cyber attack is any attempt to gain unauthorized access to a computer, computing system or computer network with the intent to ...

  • backdoor (computing)

    A backdoor is a means to access a computer system or encrypted data that bypasses the system's customary security mechanisms.

SearchHealthIT

SearchDisasterRecovery

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • call tree

    A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...

  • Disaster Recovery as a Service (DRaaS)

    Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...

SearchStorage

Close