Short life of malware

悠柚

http://www.arcabit.pl/content/category/14/28/162/lang,english/
Short life of malware

Experts discovered only 48% of malicious code is still active after 24 hours. Every day antivirus companies detect tens of thousand new malicious code but more than half of it is inactive within 24 hours. The code is deactivated by hackers themselves. They do it to avoid detection. Then they change the code a little and activate it again. "This is a never-ending race which, unfortunately, the hackers are still winning" - said Luis Corrons. "We have to wait until we get hold of the malware they have created to be able to analyze, classify and combat it. In this race, vendors that work with traditional, manual analysis techniques are too slow to vaccinate clients, as the distribution and infection span is very short" - he adds. The number of malicious code is still growing. Since the beginning of 2008 experts found about 10 million pieces of new malware. For comparison, between 1990 and 2008 about 20 million pieces were found.

恶意软件的生命周期很短

专家发现只有48%的恶意代码在24小时后依然存在。每天杀毒软件公司检测成千上万的恶意代码，但是超过一半的代码在24小时内就会不活动。这些代码被黑客自己解除。他们这样做以避免被检测。然后他们微微改动代码，在把它们激活。“这是一场没有终点的比赛，但不幸的是，黑客总是赢家” Luis Corrons说。“我们需要等待直到我们得到黑客所拥有的恶意软件才能进行分析，分类和对付它们。在这场竞赛中，那些通过传统的、手动分析技术的厂商就会太慢以致不能防止客户被感染，因为感染的时间很短（这句翻译的不好）”他又说。恶意代码的数量依然在增长。从2008年初，专家发现大约1000万新的恶意软件。作为比较的是，在1990到2008之间只发现大约2000万个恶意软件
自己翻译的

gho

翻译的不错支持

悠柚

现在的安全形势有点糟

cqpreson

好强的翻译，杀软厂商猜不出下一个病毒是什么样的，所以只能是黑客赢。

悠柚

感觉像是想推广自动分析，像星星那样 ，云安全10分钟回复

悠柚

昨天就收到Sophos的信，告诉我Sophos也有自动分析系统

display

支持一下。

葱葱.Com

24小时  只要熬过24小时就OK   也就是说品种越来越多 …………

NobleT

NR以后也会有上报自动分析系统

人民

是不是可以从中提取两个信息
1，启发很重要
2，“超大病毒库”只是宣传的噱头，比如BD