The secrets to how anti virus software really works - what they do not want you to know
Now that you know the terrible effects a virus can have on your computer or entire network of computers, you need to know how to prevent an outbreak from occurring.
Many vendors, such as Norton and McAfee, provide antivirus software that nips viruses in the bud. Antivirus software programs scan files that come through your network and prevent known viruses from entering your system. Antivirus programs can be server-based, client-based, or gateway scanners. Server-based programs are designed to protect your server operating systems, while client-based run on PCs with Windows XP, or other Windows systems. Gateway scanners are sort of what they sound like. Imagine a server or a specifically built piece of hardware that ALL of your internet traffic goes through. Well, this “boxâ€, we will call it, then selects certain traffic to check for viruses, hackers, suspicious activity, etc. If it finds something, then action is taken, otherwise it is business as usual.
Generally, antivirus software works by searching through incoming files, looking for viruses that come up in its virus dictionary, often referred to as “finger print” or “signature”. Basically, it is quickly and quietly looking for known or similar to known problems. It also checks for any out of the ordinary behavior by your computer that might indicate it is infected. With the virus dictionary method, the software compares the files to a list of identified viruses, and if any of the coding matches up, the software will delete or quarantine the virus, preventing it from infecting your computer. Sounds good, right? Well, the catch is that new viruses are invented daily, and antivirus companies are always scrambling to identify new threats and update the virus dictionary. So if a virus creeps in before the software companies identify it, or before you update your virus definitions, then your computer will get infected.
Some anti virus software try to get around unknown viruses with “heuristics”, which is a setting on a lot of anti virus software that lets the software look for what it thinks might be a virus. The biggest problem with heuristics is that they slow your computer down so much you might as well roll-back the clock to the 1950s when there were no computers, and who wants to do that?
Antivirus hardware focuses more on e-mail filtering, and some scan all HTTP and FTP traffic, or other important points of entry. Often called antivirus appliances, this hardware can usually be plugged in between your firewall and your network, and can get the job done with only a little bit of configuration.
Antivirus hardware makers promote these appliances as more cost effective over time and easier to configure. It is important to realize these are an added layer of protection, and NOT a substitute for antivirus software on your desktops, servers and email server. While antivirus software requires constant updating on all of the computers in your network, the centralized nature of antivirus hardware does simplify the issue. The key is to recognize the needs of your company, your network and what exactly you need to protect. All of these issues combined will help you tailor an antivirus software/hardware package that meets all of your needs most effectively and cost-efficiently.









