Next-Generation Computer Antivirus System Developed

For discussions about security.
Post Reply
Message
Author
User avatar
Aitch
Posts: 6518
Joined: Wed 04 Apr 2007, 15:57
Location: Chatham, Kent, UK

Next-Generation Computer Antivirus System Developed

#1 Post by Aitch »

Old news, just found
Antivirus software on your personal computer could become a thing of the past thanks to a new "cloud computing" approach to malicious software detection developed at the University of Michigan.
http://www.sciencedaily.com/releases/20 ... 152434.htm

Aitch :)

User avatar
ttuuxxx
Posts: 11171
Joined: Sat 05 May 2007, 10:00
Location: Ontario Canada,Sydney Australia
Contact:

Re: Next-Generation Computer Antivirus System Developed

#2 Post by ttuuxxx »

Aitch wrote:Old news, just found
Antivirus software on your personal computer could become a thing of the past thanks to a new "cloud computing" approach to malicious software detection developed at the University of Michigan.
http://www.sciencedaily.com/releases/20 ... 152434.htm

Aitch :)
well Aitch i've been using cloud antivirus for about 6 months now on my wife's XP pc and clients XP computers, and let me tell you its very lite and works very well, plus its free. :)
http://www.cloudantivirus.com/en/
Nortons is a thing of the past, its, slow and doesn't find half the stuff it should.
I would say for xp the best things are cloud antivirus, plus http://download.cnet.com/Spyware-Termin ... ?tag=mncol
plus http://download.cnet.com/Trend-Micro-Hi ... 27353.html
Those 3 things combined work great together on xp.
Then to clean your system I would use http://download.cnet.com/ccleaner/?tag=mncol
and to defrag your system I would use
http://download.cnet.com/JkDefrag-GUI/3 ... ?tag=mncol
all of this is free and better than anything you can buy for windows.
ttuuxxx
http://audio.online-convert.com/ <-- excellent site
http://samples.mplayerhq.hu/A-codecs/ <-- Codec Test Files
http://html5games.com/ <-- excellent HTML5 games :)

User avatar
Aitch
Posts: 6518
Joined: Wed 04 Apr 2007, 15:57
Location: Chatham, Kent, UK

#3 Post by Aitch »

ttuuxxx - you surprise me....
The researchers' new approach, called CloudAV, moves antivirus functionality into the "network cloud" and off personal computers. CloudAV analyzes suspicious files using multiple antivirus and behavioral detection programs simultaneously.

"CloudAV virtualizes and parallelizes detection functionality with multiple antivirus engines, significantly increasing overall protection," said Farnam Jahanian, professor of computer science and engineering in the Department of Electrical Engineering and Computer Science.

Traditional antivirus software that resides on a personal computer checks documents and programs as they are accessed. Because of performance constraints and program incompatibilities, only one antivirus detector is typically used at a time.

CloudAV, however, can support a large number of malicious software detectors that act in parallel to analyze a single incoming file. Each detector operates in its own virtual machine, so the technical incompatibilities and security issues are resolved, Oberheide said.

CloudAV is accessible to any computer or mobile device on the network that runs a simple software agent. Each time a computer or device receives a new document or program, that item is automatically detected and sent to the antivirus cloud for analysis. The CloudAV system the researchers built uses 12 different detectors that act together to tell the inquiring computer whether the item is safe to open.
Panda 'Cloud' AV is a naming gimmick for the unwary, methinks, and not quite the same thing, based on their video, at any rate

as an aside, one of the new worms ate all exe's and dll's on a friend's box running avast AV....totally unusable on reboot

I just wish they'd implement AV on the backbone so we don't need AV on each PC....& I'd make it LAW, ....it is a trespass, after all, so I don't know why it's allowed at all.... :(


Aitch :)

User avatar
prehistoric
Posts: 1744
Joined: Tue 23 Oct 2007, 17:34

antivirus software

#4 Post by prehistoric »

I've given up on Norton, McAfee, AVG and others. A box I set up for a friend, using free Avast!, was also clobbered.

So far, the home version of Comodo has worked, albeit with considerable overhead and user inconvenience.

The biggest problem, besides a design that never worried about security, is the way the Internet community allows deliberately malicious software to spread. The cost of launching an attack remains low, and risks are often minimal, so even tiny profits are a significant return on investment. As long as this remains true, the problem will continue. Legitimate examples of successful micro-payment transactions are harder to find. Most of these have some catch.

(How do you classify this one? If that doesn't strike you as a license to print money, what about those minutes on your cellphone plan?)

Once we put a crimp on profit, we can address any remaining problems caused by seriously-disturbed individuals, which all of us here have encountered.

cthisbear
Posts: 4422
Joined: Sun 29 Jan 2006, 22:07
Location: Sydney Australia

#5 Post by cthisbear »

I wouldn't use Panda.

It's got a bad habit of deleting items without your say so
and control.

Hitman Pro is better and is very quick to scan machines.
It gives you a one off license to fix any virus issues it finds.

It uses Avira, Nod32, Prevvx, A-Squared and Gdata

http://www.surfright.nl/en/hitmanpro

Uninstall after you finish.

/////////

For a speedy scanner....Avira Antivir Free.
I don't enable the Guard.

http://www.free-av.com/

It nags you but you can beat the notifier.

http://www.mydigitallife.info/2009/11/1 ... -avnotify/

There are other sites as well of course with a How To.

/////////////

Many sites have Linux boot cds.

ttuuxxx mentioned Bit Defender in another post????

Kaspersky, Avira, Dr Web etc have them.

http://www.techmixer.com/free-bootable- ... load-list/

I use the Avast Bart boot cd beta.
Still works. They did an update but my key is still a goer.
6 years with a Beta....love it.

/////

There is no one simple way with viruses.
Look at the Antivirus 2008, 2009, 2010 trojan.
Puppy removes it but these lot can easily move the location.

Same with: How to remove SecurityTool...my Reply 35

http://www.spywarevoid.com/remove-secur ... -help.html

Avast messed up badly one month and deleted files.

http://support.avast.com/index.php?_m=k ... icleid=377

Combofix did it the other week.

http://forums.majorgeeks.com/showthread.php?t=208871

They all have problems.
Mcafee and Nortons are well known for stuffing up.

Every day is a new day.
Scumware is the future more and more for Windows.

Just downloaded this last night 4 free.

Online Armour with AV free for one year.
Not that I'd ever give you the key if you downloaded from Cnet
and forgot to register.

http://forums.whirlpool.net.au/forum-re ... ?t=1373636

Pc tools must have got their act together...number2.
Last year they were done over badly.
Comodo is number one and free.
If you have Vista you need at least the Comodo firewall.
You can leave out the AV.

http://www.matousec.com/projects/proact ... esults.php


Chris.

User avatar
abushcrafter
Posts: 1418
Joined: Fri 30 Oct 2009, 16:57
Location: England
Contact:

#6 Post by abushcrafter »

Thanks.

User avatar
prehistoric
Posts: 1744
Joined: Tue 23 Oct 2007, 17:34

firewall

#7 Post by prehistoric »

One note on firewalls, if you install any other computer firewall, be sure the Windows firewall is disabled, otherwise you'll have trouble reaching anything.

User avatar
Aitch
Posts: 6518
Joined: Wed 04 Apr 2007, 15:57
Location: Chatham, Kent, UK

#8 Post by Aitch »

I haven't had a firewall problem with XP Home & Kerio from LastFreeware

Works a treat & goes through GRC's tests, yet I can still use P2P etc....

I suppose my gripe is what Chris refers to

'AVs that do something without your sayso & control'

Whatever happened to 'removing/cleaning the virus' before putting the original file back?

Even if a virus doesn't kill your PC, 3/4 of the AV softwares now do instead!!

And many don't have a 'return a file from the vault' choice either

'The OS supposed to be glass' :wink: ....is truly become ultra-fragile

Now if I can just get 3G going in 214X and find a way to reduce the costs....

Why haven't we got a ham radio/free internet service??.. :lol: :lol:

Anyhow, it is veering off topic with all this,....people will get the impression they're on a *'doze site... :lol:

I get the impression that there is a directive somewhere to allow all this virus cr*p, so that the embedded chip implementation gets called for....

http://www.murga-linux.com/puppy/viewtopic.php?t=51918

Another BB by the backdoor move..... :(

Aitch :)

User avatar
Pizzasgood
Posts: 6183
Joined: Wed 04 May 2005, 20:28
Location: Knoxville, TN, USA

#9 Post by Pizzasgood »

Aitch wrote:I just wish they'd implement AV on the backbone so we don't need AV on each PC....& I'd make it LAW, ....it is a trespass, after all, so I don't know why it's allowed at all.... :(
Sounds like a bad idea to me. The network should be transparent. Do you really want them to tamper with your data? I don't. And having them look at the data would slow things down and make operating the network more expensive - which means prices would have to be increased. (Though perhaps the resulting decrease in traffic due to less zombie chatter would counter this.)

Not to mention privacy issues. How do you think they would implement this? Deep packet inspection. And hey, as long as they're looking closely at and tampering with the data, why not go beyond AV?
[size=75]Between depriving a man of one hour from his life and depriving him of his life there exists only a difference of degree. --Muad'Dib[/size]
[img]http://www.browserloadofcoolness.com/sig.png[/img]

User avatar
mikeb
Posts: 11297
Joined: Thu 23 Nov 2006, 13:56

#10 Post by mikeb »

Talking of censorship I'm sure I posted on this thread.....guess the worms are burrowing in my head again....

mike

User avatar
Q5sys
Posts: 1105
Joined: Thu 11 Dec 2008, 19:49
Contact:

#11 Post by Q5sys »

Pizzasgood wrote:
Aitch wrote:I just wish they'd implement AV on the backbone so we don't need AV on each PC....& I'd make it LAW, ....it is a trespass, after all, so I don't know why it's allowed at all.... :(
Sounds like a bad idea to me. The network should be transparent. Do you really want them to tamper with your data? I don't. And having them look at the data would slow things down and make operating the network more expensive - which means prices would have to be increased. (Though perhaps the resulting decrease in traffic due to less zombie chatter would counter this.)

Not to mention privacy issues. How do you think they would implement this? Deep packet inspection. And hey, as long as they're looking closely at and tampering with the data, why not go beyond AV?
I gotta agree with Pizzasgood on this one.
1) And how exactly would your backbone AV work with encrypted data? If its encrypted its not readable, so either A) the key must be known... thus no security and privacy or B) its not readable, and AV would be transmitted encrypted thus rending the entire point of Backbone AV pointless.

2) look at how many false positives current AV systems have, do you really want this happening on the backbone?

3) And if everything is in the clear how is the AV system to know whats a virus and whats code someone is posting to a forum like this. Pizza could post some code for me on here to run on by box for a very specific purpose. It may have a perfectly legit code, but if this code tampers with things in my system, then it would be flagged. This could have HORRIBLE ramifications for the Open Source community, since all code transmitted could possibly be flagged as hostile.

4) Lastly... what about software that is legal and is used like a trojan. All of those remote admin programs wouldnt be able to be transfered across the net because they operate in the very same ways that malicious trojans do.

Post Reply