How to Block the New Drive-by Exploits [page 3/3]

Advertise at AfterDawn.com

Link to us!

Private messages

Compose a private message

List of all updated threads

Threads without replies

Search messages

Tuesday 14.5.2024 / 22:56

Search AfterDawn Forums:

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > how to block the new drive-by exploits

Browse by topic

Forums

Start a new thread

How to Block the New Drive-by Exploits

Jump to:

Posted

Message

Page:	< Previous	1	2	3

2oldGeek

AfterDawn Addict

28. February 2014 @ 21:27

Link to this message

Originally posted by mez:

I wonder how long a crawler's cycle is. If it is 12 hrs or less that is pretty safe. If it is 48 hrs that isn't all that safe.

It's very hard to tell with a lot of cloud going on these days. As you probably know, I do a lot of playing with zero/day infections and am seeing the time factor being reduced more each day. I can't believe that the filter itself has a crawler but with the almost instant cloud update from the crawlers I am thinking that the most likely method is just reversed from when it was a signature list being updated. It would appear that the updates contain a "white" list and anything that don't fit that gets thrown out. The signatures are the "black" list for the removal of anything that slips through and can be a little later than the first batch and then with good heuristics and behavioral coming into play it's a win win.

[ + quote]

Page:	< Previous	1	2	3

Start a new thread

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > how to block the new drive-by exploits


		User name	Password

		Not registered yet? Register here. Lost your password? Click here.