antivirus software: how do you actually install it?

Odd iodine at runbox.no
Tue Mar 23 14:52:21 UTC 2010


Liam Proven wrote:
> There are trojans on Linux, but it is a very minor risk so far.
> 
> But this is a *critical* difference of paramount importance. The
> reason is simple.
> 
> *Security software cannot block trojans* because trojans /trick/
> people into performing an action, so all they need to do is trick
> people into bypassing their security software.

It can block them if it has a signature for them. If not, it can block
them based on their behavior, through heuristic scanning. But I
wouldn't bet on either, as there's no guarantee.

> It can block *known* trojans, but there is the zero-day problem: at
> some point, everything is new and not yet known.
> 
> Software is not intelligent: it cannot look at a program and work out
> what it does and only stop the nasty stuff. Lots of companies sell
> products that *claim* to do this. They are all, without exception,
> liars.

That's simply not true. The best catch a significant percentage through
heuristic (based on behavior) scanning.

http://www.av-comparatives.org/images/stories/test/ondret/avc_report25.pdf

-- 
Odd




More information about the ubuntu-users mailing list