Next: Detection of Modification Up: Detection Tools Previous: Detection by Static Analysis

Detection by Interception

To propagate, a virus must infect other host programs. Some detection tools are intended to intercept attempts to perform such ``illicit'' activities. These tools halt the execution of virus-infected programs as the virus attempts to replicate or become resident. Note that the virus has been introduced to the system and attempts to replicate before detection can occur.


konczal@csrc.ncsl.nist.gov
Fri Mar 11 21:26:02 EST 1994