[科普]Symantec安全技术详解——STAR Technology

wjhstu-VxG

wjcharles 发表于 2012-5-6 00:12
官网又更新了，现在是12亿实例，1400项行为属性

……多了一个1吗

尘梦幽然

wjcharles 发表于 2012-5-6 00:12
官网又更新了，现在是12亿实例，1400项行为属性

请问官网地址能否提供一个？

shuren88

支持Symantec

zhym91

感觉铁壳技术很好。。。现在单奔N360中

wjcharles

5234377 发表于 2012-5-6 09:50
请问官网地址能否提供一个？

昨晚忘了贴地址。。。

这个是最新的，比较详细，sonar历代的介绍链接也在
http://www.symantec.com/theme.jsp?themeid=star&tabID=4

这个有点概括，有点旧，但比较能说明重点
http://www.symantec.com/about/profile/star_technology.jsp

wjcharles

wjhstu-VxG 发表于 2012-5-6 09:40
……多了一个1吗

见96L

还增加了对NIS组件联动的详细介绍，都上升到通信协议了。。。

STAR Intelligence Communication Bus
The SONAR technology doesn’t work by itself. This engine shares intelligence with our other protection technologies using the STAR Intelligence Communication Protocol (STAR ICB). The SONAR engine communicates with the Network IPS, AV and the Insight Reputation engine allowing for more informed and accurate protection that no other security company can deliver.

这类介绍应该都是落后当前数据的，不过最近铁壳好像更新勤快了点

尘梦幽然

wjcharles 发表于 2012-5-6 14:01
昨晚忘了贴地址。。。

这个是最新的，比较详细，sonar历代的介绍链接也在

多谢，我看到了。

Symantec has built up one of the world’s largest databases of behavioral profiles on nearly 1.2 Billion application instances. By analyzing the attributes of what good applications and bad applications do using machine learning analysis, Symantec is able to create profiles of behaviors for applications that haven’t even been created yet! Relying on almost 1,400 different behavioral attributes and rich context that we can gather from our other endpoint security components such as the Insight, IPS, and AV engine, the SONAR classification engine is quickly able to spot malicious behaviors and take action to remove bad applications before they do damage.

wjhstu-VxG

wjcharles 发表于 2012-5-6 14:05
见96L

还增加了对NIS组件联动的详细介绍，都上升到通信协议了。。。

的确，对于sonar上一版的确写的不怎么清楚啊

wjhstu-VxG

wjcharles 发表于 2012-5-6 14:05
见96L

还增加了对NIS组件联动的详细介绍，都上升到通信协议了。。。

你这是逼我干苦力啊……好吧，已经更新了，累死了

wjhstu-VxG

5234377 发表于 2012-5-6 14:22
多谢，我看到了。

哈哈，重磅更新，看看哦