有人对SOPHOS 感兴趣么

360Tencent

很久前的文章了，逆向分析各个组件（特征比对，漏洞防护...），作者的观点是至少就9.5版本来说，SOPHOS 不堪一击

Sophos demonstrate considerable naivety in many topics
key to the efficacy of their product. Their widespread use
of XOR encryption for secrecy, and their poor
understanding of  rudimentary  exploitation  concepts like
return-to-libc reinforce this.
The promise of antivirus is that users will be less dependent
on making good trust decisions. While certainly desirable,
Sophos appear ill equipped to keep this promise with their
current technology.
The pseudo-scientific terminology used by Sophos to
promote their software masks elementary pattern matching
techniques. While their attempt at implementing runtime
exploit mitigation should be applauded, their failure to
understand the subject area resulted  in a substandard
product far exceeded by existing published solutions.

注：我是小白，看不懂里面的内容，感兴趣的话reddit 上还有相应的讨论

http://www.reddit.com/r/ReverseE ... f_sophos_antivirus/

猪头无双

除了对神KEY感兴趣，其他的一概都无视

じ☆ve楓少ツ

曾经我也跟人讨论过这类问题，研究一下高级设置，就发现Sophos默认的情况下为了减少资源占用跟误报，禁用了很多东西，大家打开高级设置这块，仔细的看看，就会明白，不是不堪一击的。

360Tencent

じ☆ve楓少ツ 发表于 2012-4-12 17:07
曾经我也跟人讨论过这类问题，研究一下高级设置，就发现Sophos默认的情况下为了减少资源占用跟误报，禁用了 ...

不是设置的问题，他是对软件内部模块进行分析，比如特征码匹配，漏洞防御什么的

じ☆ve楓少ツ

呵呵，9.5系，软件本身确实有问题，不过到了10以后，已经修复了。

黑岩松

一家之言而已，不必当真

helokii8

已经10了，那篇文章出的很早了，针对护士的各种漏洞

boxing

感觉不太好用

firefox3

我给护士配的是Doctor of Medicine, MD
还有小弟spyshelter

qiugang

一直在用 SOPHOS 很好用的啊 就是现在没有了代{过}{滤}理升级服务器 得每个月申请账号