Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Can you please tell me how virus signatures are practically created, and how are they generated at runtime to match with the database and in what part of this protocol does Cryptographic hashing comes into play ?
Thankyou for your answer ! But can you please tell me how will an AV detect malicious scripts ? Just a slight change in the text of a script (say a python script) will cause a different Cryptographic hash for it ! In that case will the AV have to shutdown the Python Interpreter forever ?
@pm1391 I feel signature based detection is the only method possible if an antivirus has limited permission on an OS ! For example in Android third party apps cannot have full access to other apps execution
Thankyou for your answer ! I was actually implementing the software without any external libraries as it is a crypto only application. I thought of using XChaCha20 because it got popularized, but I am sticking with AES !