News for hackers. Stuff that matters.

A comment on Software security suffers as startups lose access to Google’s virus data. Parent comment

Re:Software security suffers as startups lose access to Goog... by iancarroll on Monday May 09, 2016 @10:54AM (#11660257)
It's likely they are using an engine based almost entirely on run-time heuristics - that is, stopping malware when it behaves suspiciously. VirusTotal does "scan-time" analysis of files where the file is never run, only checked against AVs. If they have no "traditional" signatures, they wouldn't be compatible with this method.
[ Parent | on HN ]
Re:Software security suffers as startups lose access to Goog... by pandemicsyn on Monday May 09, 2016 @11:30AM (#11660547)
Yup, that seems likely. Their whole shtick is that signature based checks don't cut it and that their behavior based system is the way to go.

https://en.wikipedia.org/wiki/SentinelOne#Technology

https://www.sentinelone.com

[ Parent | on HN ]
Re:Software security suffers as startups lose access to Goog... by sjg007 on Monday May 09, 2016 @02:17PM (#11661909)
Sure but then generate a signature and submit it.
[ Parent | on HN ]
Re:Software security suffers as startups lose access to Goog... by iancarroll on Monday May 09, 2016 @04:51PM (#11663062)
It's not really that easy...
[ Parent | on HN ]
Re:Software security suffers as startups lose access to Goog... by sjg007 on Monday May 09, 2016 @11:18PM (#11664953)
It's not that hard.
[ Parent | on HN ]