Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What is the difference between antivirus, antimalware and antispyware software? If any clear distinction can be defined.

share|improve this question
add comment

2 Answers

up vote 3 down vote accepted

I don't think this is the definitive definition of them, however I would say the difference:

  • Antivirus searches for 100's of signatures of well-known virii, regardless of what file they're in.
  • Antimalware searches for lists of known evil programs. (Perhaps there are smarter products that actually search for programs that do bad stuff, I'm not familiar).
  • Anti-spyware I think searches for registry keys, 3rd party cookies, and other tracking devices.
  • Also should mention anti-rootkit, these search specifically for malware that is designed to hide from the operating system (and thus standard anti-malware).

As you said though, not sure any clear distinction still exists, since most of the vendors are effectively packaging the different scannign engines in single product or suite.

share|improve this answer
add comment

Wanted to add this as comment, but it does not fit in.

Would like to add that both antivirus and antimalware use similar techniques because of, how @AviD said, there are no clear distinction in their work specifics. More important is that search by signature can be defeated by self-modifying code, or polymorphic code. That's why antimalware software uses smart heuristics, strange behavior detection. Also there are emulators added, that runs code and watches what it does. Another one technique is sandboxing. There is difference between code emulation and sandboxing. Usually, first one repeats code in safe manner, not allowing unsafe instructions to execute, second one hooks unsafe functions.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.