Anti-Malware filtering can be partly acheived by URL Filtering and blocking sites known to be hosting malicious code; however in todays environment threats tend to come from legitimate sites that have been compromised by a CVE.
Why struggle to drive traffic to a new previously unknown site when malicious code can be placed on a popular legitimate site with many thousands of visitors per day by exploiting a vulnerability in the web server.
Basic protection can be provided by scanning all sites using one or more anti-virus engines; however threats are continously growing at an exponential rate and are now evolving beyond the ability of these traditional solutions.
Anti-virus signatures have skyrocketed from 2005 to 2010
Todays threats exploit technology such as ASP, VB Script, Java Script etc on legitimate websites and code can often be found embedded in commonly used media such as Adobe Flash and documents such as PDF’s.
To fully combat todays threat landscape it’s nessary to utilise real-time malicious code analysis in order to provide zero-day protection a simple layered defense is not enough.
For more information on real-rime malicious code analysis download our white paper titled “Closing the Vulnerability Window in Today’s Web Environment”