Discussion on the development of "cloud security" technology for domestic security manufacturers

Antivirus software industry has been a technology innovation driven by the industry, or, to put it another way, it is a technology-driven industry, because the industry itself is for the anti-virus, each virus technology development, the corresponding anti-virus technology always need to follow the development of a step to be able to deal with the current situation. And this also determines the anti-virus software relative to the development of virus technology lag, it seems that new security threats will always emerge, and anti-virus software technology will also develop more than that, the elimination of the other, to promote each other, it seems endless.

All along, anti-virus software is based on signature scanning methods to check the virus, this way only after the emergence of new viruses can analyze the signature and add to the virus library, with congenital hysteresis. But virus technology has been developing and new vulnerabilities have emerged, a growing number of new viruses are being generated every day, in response to unknown threats, the 2007 antivirus industry pushed the "active defense" technology concept-they are through such as "Behavioral Analysis", "virtual machine", or "heuristic" and other confusing nouns-- Let people see another idea, they can proactively detect and intercept unknown threats. But so far, no matter what kind of active defense technology can not be used alone, the traditional signature scanning mode is still the main anti-virus software technology. In the meantime, there has been a little change in the development of virus technology, instead of focusing on the development of new viral technologies, virus makers have switched to another idea, which occurs in the production and transmission of the virus, making the virus simpler, more complex, more complicated, and the virus begins to become internet, Ultimately, these viruses are linked to economic benefits, and the complete viral industry chain is formed. In the 2008, the trend of viral internet is becoming more and more obvious, traditional anti-virus software has been difficult to cope with the increasing number of new viruses produced every day. So, accordingly, antivirus software also began to Internet, "cloud security" concept turned out, antivirus software industry ushered in a new change.

    The first concept of "cloud security" is trend technology, in May 2008, trend technology in the United States officially launched a "cloud security" technology. "Cloud security" concept once launched, soon by the industry hot, and for the domestic anti-virus software industry like to follow the line, nature is not let go of this concept. Soon, on July 16, 2008, rising officially launched the "Rising Card card 6.0", also released its "Cloud Security" program. According to Rising, its "cloud security" program is the content, through the "rising card" will be users and rising server closely linked to the formation of a huge Trojan/malware monitoring, killing network, each rising card users for the "cloud security" plan to contribute a force, while sharing the safety of all other users of the results. Users simply download the use of the free "rising card 6.0", without any operation, you can join the "cloud security." In fact, rising at this time of the "cloud Security" program is only a prototype, still only the security manufacturers commonly used virus samples automatic escalation analysis system for further development. By October 2008, Rising has launched its "Cloud Security" 2.0 version, the rising in its software to join the "Hanging Horse Web page" Automatic Diagnosis and collection module, once the discovery of suspected infected Web page, immediately blocked Trojan virus download, and the diagnosis information returned to the rising technology platform for further analysis and treatment, And will be intercepted malicious URLs added to the malicious Web site Library. Thus, rising "cloud security" formed a relatively complete system. In 2009, rising will launch its "cloud Security" version 3.0, in this version, the main work will focus on expanding the "cloud security" of the client volume and access to data mining processing.

The other two antivirus software vendors Jinshan and jiangmin response to "cloud security" is a bit dramatic, in the initial stage, they are "cloud security" the concept of scorn. Jinshan Poison PA Anti-Virus engineer Tiejun that "cloud security" is the concept of speculation by manufacturers, and Jinshan had similar technology two years ago. Jiangmin President Tao Niu said that the cloud-style construction of large-scale feature library is not enough to deal with the rapid growth of security threats, domestic and foreign antivirus manufacturers also need to be in the core anti-virus technology up and down. However, after a few months, the attitude of the two companies has changed. October 14, 2008, Jiangmin released its KV2009, the "cloud security" antivirus system has been quietly listed as one of its new 10 new technologies. Jiangmin said that as early as 2006, it launched a "cloud security" anti-virus system, with the help of the system, jiangmin daily processing of suspicious procedures and virus samples tens of thousands of, daily update thousands of new virus. However, Jiangmin did not pay much attention to its "cloud security" system, Jiangmin said that it is more concerned about the "cloud security" and "core technology" organic integration, that "cloud security" must be built in the "kernel-level self-protection", "sandbox", "virtual machine" and other core technology on the basis of power.

Jinshan's attitude towards "cloud security" has changed even greater, November 18, 2008, Jinshan in the release of Kingsoft 2009 when the full introduction of the "cloud security" concept, joined the "cloud security" concept of the ranks of the hot, but also because of the experience of many vendors, Jinshan this launch of the "cloud security" System is significantly more complete. Jinshan Poison PA 2009 of the "cloud security" system can be divided into a large sample storage and calculation of the mercury platform, the Internet Trusted authentication services, reptile system three levels. Based on the above three platforms, Jinshan Poison PA 2009 successfully realized from the sample collection, sample processing, security application coverage of the entire Internet security system to fully deploy. Jinshan said that the "cloud security" plan for the full launch, so that it achieved three major breakthroughs: the number of virus-virus samples increased 5 times times, the maximum virus processing capacity increased by 100 times times, emergency virus response time shortened to 1 hours. In the future, Jinshan poison PA's "cloud security" system will adopt a more open Security Center platform, more fully introduce user interaction, more comprehensive application to the safety of Jinshan products, at the same time, but also with the Internet software industry more fully cooperation, research and operation of internet-based services, and truly realize the Internet of software.

Thus, the domestic three anti-virus software manufacturers have a "cloud security" system, but why do we have to build their own "cloud security" system? In fact, for the concept of "cloud security", the industry has always felt that a purely conceptual hype, this view is reasonable, because "cloud security" implementation is basically based on the existing technology to complete, and pure anti-virus technology is not significant innovation, from this point of view, "cloud security" It does not seem to contain any new things. But we also have to note that virus technology is not too much of a revolution, but why is the current network threat more serious than ever? The key is the internet of the virus industry. Now, from the preparation of Trojan virus, spread to sell, the entire virus industry chain has been completely internet, the number of viruses has exploded, its attack efficiency and attack means have a qualitative leap in this situation, the traditional security software products have been unable to meet the security needs of users. Therefore, the root cause of all this lies in the change of the virus manufacture, the communicators ' thinking, the Internet of virus, and not the development of the pure new virus technology, which leads to the backwardness of the traditional security software. Since the virus to the internet direction of change, then, anti-virus software should also be changed to the internet direction to deal with, and "cloud security" is the result. The major security manufacturers to build their own "cloud security" system, is the direction of the Internet to change the embodiment.

Visible, "cloud security" is not a pure anti-virus technology, we can understand it as an anti-virus concept, a safe internet of ideas, an Internet security defense system, that is, anti-virus software Internet. With the cloud security system, antivirus software can collect virus samples faster faster handling of the virus and the ability to stop the network before it threatens to reach the user's computer, the efficiency of anti-virus is greatly enhanced, and will be more intelligent, bringing a better user experience, the ultimate goal of the Internet age users can be faster And more comprehensive security protection.

The "cloud security" technology is expected to be applied further in 2009 and will be built into a three-dimensional defense system, combined with traditional virus defense technologies based on PCs. In the "cloud security" concept, antivirus software vendors are no longer just pure technical strength, each manufacturer's personnel and hardware equipment input, their number of users, etc., will become one of the decisive factors. This will be the anti-virus software industry in a revolution, the network security field will usher in a big shuffle. In this battle between the clouds, who can laugh to the end, who will become the last king ...