Antivirus and Anti-Malware
Malicious software is one of the most common attack vectors used by adversaries to compromise systems. Therefore,
controls are required for its detection and prevention.
Historically, anti-malware controls, often referred to as virus checkers, were host-based applications that scanned
incoming traffic such as email and looked for patterns (signatures) that identified known problems. While this can be
effective for known threats, it cannot detect malicious code that has yet to be identified.
Heuristic-based methods of detecting unknown malware use specific techniques to identify common malicious code
behaviors and flag them as suspicious.