Fighting malware and spam

Behaviour blocker

Software that monitors systems/networks for suspect behaviours

Behaviour-blocking software operates by monitoring a system and looking out for suspicious actions being carried out. If an action is attempted which contravenes the blocker's rules, the offending program is blocked from further actions and the user alerted.

Behaviour blockers often run in conjunction with conventional anti-malware software and firewalls, but may come in a standalone form. At the firewall level, behaviour blockers may look for attempts to initiate outbound connections, or to download code. Within the system, suspect actions may include editing the system registry, writing to protected system areas, or harvesting email addresses or password data.

Poll

Virus Bulletin

• Does the punishment fit the crime?
• Prophet and loss
• All your MP3s are belong to us
• Malware teaching considered harmful?
• Il buono, il brutto, il cattivo
• Lavasoft Ad-Aware 2008
• The problem of backscatter – part 1