Cloud Security and sandbox

What's called cloud security and sandbox


Technology October 14 launched the first anti-virus "sandbox" "cloud security" anti-virus system, recently, rising, Jinshan has launched a high-profile "cloud security" concept, and officially launched to "cloud security" as the bright spot of the 2009 version. So far, the three domestic anti-virus manufacturers have a "cloud security" system, and hope that this system can effectively deal with the current rapid growth of new viruses and Internet threats.


Anti-Virus expert He Bangdao introduced, as early as 2006, launched a "cloud security" anti-virus system, with the help of the system, daily processing of suspicious procedures and virus samples tens of thousands of, daily update thousands of new virus. Since the launch of the "cloud security" antivirus system in 2006, the antivirus Center has been processing a variety of suspected virus samples over


Tens of thousands, virus processing capacity than 2006 before the increase of 200 times times, effectively curb the rapid growth of the virus.


President Tao Niu in an interview, said, "In fact, to build a cloud of large-scale feature library is not enough to deal with the rapid growth of security threats, domestic and foreign antivirus manufacturers also need to be in the core anti-virus technology up and down, such as virtual machine, heuristic, sandbox, Intelligent Active defense and other unknown virus prevention technology need to strengthen and develop, most anti-virus software itself self-protection ability also need to strengthen. "This argument has been recognized by a number of international senior computer anti-virus experts, because, the virus grows again fast, only the quantity change, but in the reality, causes the huge loss, but is often very few uses the new virus technology the virulent virus, in recent years mainly uses" the disk machine "as the representative" the malicious drive virus ". Therefore, antivirus manufacturers pay attention to anti-virus "quantity" at the same time, more attention should be paid to the "quality" of anti-virus to deal with 10 million common virus


easy, but able to deal with 100 malicious driver virus, depends on your core anti-virus technology is strong enough.


More attention is "cloud security" and "core technology" organic integration. In other words, "cloud security" must be built in the "kernel-level self-protection" "sandbox" "virtual machine" and so on the basis of the core technology to show the power, without these core technologies, anti-virus software in front of the virus may appear "helpless" embarrassment, the reality of many anti-virus software scan found the virus, but unable to clear, Even the virus shuts down the phenomenon everywhere. This is why in the introduction of KV2009, the first emphasis is "sandbox" "kernel-level self-protection" "Intelligent Active Defense" "virtual machine" and other core technologies, and the "cloud security" anti-virus system behind the reasons.          Antivirus and other industries, the first is the foundation to be strong enough, the foundation is not solid, the building of the height is not reliable.


when it comes to the "sandbox" technology, he thinks that some manufacturers think "sandbox" is actually "virtual machine", which is a major misunderstanding. "Sandbox" is a deeper system kernel-level technology, and "virtual machine" both in the technical principle or in the form are different, "the sandbox takes over the behavior of the virus calling the interface or function, and the rollback mechanism is implemented after the virus behavior is confirmed, and the" virtual machine "does not have a rollback recovery mechanism. After the virus is fired, the virtual opportunity is based on the behavior characteristics of the virus to determine a certain type of virus, and call the engine to clear the virus, there is an essential difference between the two. In fact, when dealing with new viruses, the use of "sandbox" has begun to play a powerful role. There are users in the shutdown anti-virus software real-time monitoring, only opened the "active defense with sandbox technology" mode, the result of running "sweep wave" new virus, all the behavior of the virus was intercepted and erased, no chance to leave any traces in the system.


What Justice said, the current network security situation is very grim, the National Computer Virus Emergency treatment Center deputy director has said, the current anti-virus facing the most important problem is the driver of anti-virus software technology challenges. Therefore, the current anti-virus priority is to further enhance the anti-virus core technology, in the premise of ensuring anti-virus technology, full use of "cloud security" anti-virus system fast response mechanism, to create a "cloud security" Gaza box double security system.