How It Works
An algorithm is used to evaluate hundreds of attributes relating to software running on a computer. Various factors are considered before determining that a program is malicious, such as if the program adds a shortcut on the desktop or creates a Windows Add/Remove programs entry. Both of those factors would indicate the program is not malware. The main use of SONAR is to enhance detection of zero day threats. Symantec claims SONAR can also prevent attackers from leveraging unpatched software vulnerabilities.
Ed Kim, director of product management at Symantec, expressed confidence in SONAR, "We've done extensive testing on emerging threats, and it catches early threats and variants of existing threats."
Read more about this topic: Whole Security
Famous quotes containing the word works:
“I look on trade and every mechanical craft as education also. But let me discriminate what is precious herein. There is in each of these works an act of invention, an intellectual step, or short series of steps taken; that act or step is the spiritual act; all the rest is mere repetition of the same a thousand times.”
—Ralph Waldo Emerson (1803–1882)