Hi,
I’m personally making a report comparing some internet security software(avast, avg, avira…etc) of 2011 version now,
so in this topic I’d like to ask you about some features of Avast 5 in detail.
First, could you please explain me how “avast! Community IQ” works exactly?
According to the official site:
[b][i]avast! Community IQ
Most samples we process come from sensors deployed throughout the avast! community in the Behavior shield and anti-rootkit modules. This is a unique source of data made possible only thanks to our huge user base. Most of the collected samples are analysed by a number of automated processes and only a small fraction of the samples need to be processed manually by our virus analysts.[/i][/b]
Is it like in-the-cloud technology, that some other companies(panda, trendmicro…etc) are introducing to their products?
I know that “cloud” is actually buzzword, but does it always refer latest malware definition to the server when each programs are scanning, to strengthen defence for zero-day attacks?
Or, maybe does it just mean automated processes that’s similar to AVG, Avira, Norton, Kaspersky and so on?
Second, I couldn’t understand the mechanism of behaviour blocking feature of Avast.
Please note that here this is not heuristic detection system, because some people or vendors are saying they’re same.
In my opinion, behaviour blocking is:
“an advanced feature that always monitors all running programs and warn user if any behaviours of them seem malware that are not usual about safe programs”
For instance, about kaspersky internet security, I often see dialogue boxes on the screen to close suspicious applications because it seems like key logger or common malwares.
What I’d like to ask is, does avast have same feature?
As far as I tried avast before, I’ve never seen such dialogues but avast says it has behaviour blocking system.
I’m sorry for my poor English, and many thanks for reading it!
Regards,
TCD272 http://www.youtube.com/user/TCD272
