Browse Definitions :
Definition

virus signature (virus definition)

A virus signature (also known as a virus definition) is a file or multiple files that are downloaded by a security program to identify a computer virus.

The files enable detection of malware by the antivirus (and other antimalware) software in conventional file scanning and breach detection systems.

Researchers at antivirus firms study viruses found commonly on the internet, often testing their behavior in a sandbox-type set up. The sandbox is generally a virtual machine-based environment. The behavior, file names used and unique strings of data in the files are all analyzed.

Commercial antivirus utilities have long depended on virus definitions. Security software frequently downloads the files to keep the software able to detect current threats. The files are used to update criteria for detection of files in hard drive scans and checks on running processes. The main weakness of virus signatures is in detection of new viruses.

Another method of virus detection is the use of heuristics. In these systems, antivirus programs use algorithms to detect the behavior patterns that were found when a specific virus was tested by researchers. Strong heuristics are becoming increasingly important because of advanced persistent threats, which conceal themselves through encryption to evade detection by typical scans. Metamorphic and polymophic viruses, which change their code in propagation, also hide malicious software from conventional scanning processes.

This was last updated in January 2017

Continue Reading About virus signature (virus definition)

SearchNetworking
  • network packet

    A network packet is a basic unit of data that's grouped together and transferred over a computer network, typically a ...

  • virtual network functions (VNFs)

    Virtual network functions (VNFs) are virtualized tasks formerly carried out by proprietary, dedicated hardware.

  • network functions virtualization (NFV)

    Network functions virtualization (NFV) is a network architecture model designed to virtualize network services that have ...

SearchSecurity
  • Android System WebView

    Android System WebView is a system component for the Android operating system (OS) that allows Android apps to display web ...

  • data masking

    Data masking is a method of creating a structurally similar but inauthentic version of an organization's data that can be used ...

  • computer worm

    A computer worm is a type of malware whose primary function is to self-replicate and infect other computers while remaining ...

SearchCIO
  • privacy compliance

    Privacy compliance is a company's accordance with established personal information protection guidelines, specifications or ...

  • contingent workforce

    A contingent workforce is a labor pool whose members are hired by an organization on an on-demand basis.

  • product development (new product development -- NPD)

    Product development, also called new product management, is a series of steps that includes the conceptualization, design, ...

SearchHRSoftware
  • talent acquisition

    Talent acquisition is the strategic process employers use to analyze their long-term talent needs in the context of business ...

  • employee retention

    Employee retention is the organizational goal of keeping productive and talented workers and reducing turnover by fostering a ...

  • hybrid work model

    A hybrid work model is a workforce structure that includes employees who work remotely and those who work on site, in a company's...

SearchCustomerExperience
  • Salesforce Trailhead

    Salesforce Trailhead is a series of online tutorials that coach beginner and intermediate developers who need to learn how to ...

  • Salesforce

    Salesforce, Inc. is a cloud computing and social enterprise software-as-a-service (SaaS) provider based in San Francisco.

  • data clean room

    A data clean room is a technology service that helps content platforms keep first person user data private when interacting with ...

Close