I think the layering notion, i.e. combining several different methods of AV protection operating at different levels of system granularity and with different detection methodologies is certainly an interesting one. I'm not sure if I buy the idea that the market is somehow adverse to this, unable to implement it, or stuck in a rut. It seems very easy to toss out the argument that people didn't want a heuristic detection method from norton, because they had become accustomed to McAffee's signature based approach, but I really think it wouldn't have been that difficult to combine the approaches in a single bundled package a long time ago.
To go on a nostalgia trip, I remember back in the day even when people started coming out with those 'roll your own' virus engines for script kiddies, which allowed some minor tweaking and customization to foil straight signature approaches. Meanwhile, those crazy bastards in Bulgaria were rumored to be playing with polymorphic virii.
To my mind, the problem really isn't one in which a straight biological infectation paradigm works, but one to which something akin to a biowarfare model is more appropriate. Remember that these things don't mutate on their own, but that there will always be a move-countermove going on somewhere. It's the same old thing - if you build better tank armor, someone will come up with better armor piercing rounds, etc.
The performance numbers Anand came up with on this are a little disappointing, in my view. It's nice, of course, to get a few seconds quicker startup of apps or level loads, but I doubt this is really worth it to most of us at this stage (aside from the coolness factor).
Once capacity of these rises enough to make them capable of replacing HDs, though, they might be really nifty in the entertainment/HTPC space due to that silent operation.
Basically, an interesting concept, still not quite ready for prime time, but getting a lot closer.
Worth a quick read, anyway...
Actually, although I'm sure you didn't mean to be misleading, remeber that in certain very limited circumstances you are ethically allowed to claim a specialty (Admiralty and Patent) and you can always mention that you choose to limit your practice to certain areas (i.e. all the "have you been bitten by a dog recently?" ads you see on late night TV).
Slashdot Mirror
I think the layering notion, i.e. combining several different methods of AV protection operating at different levels of system granularity and with different detection methodologies is certainly an interesting one. I'm not sure if I buy the idea that the market is somehow adverse to this, unable to implement it, or stuck in a rut. It seems very easy to toss out the argument that people didn't want a heuristic detection method from norton, because they had become accustomed to McAffee's signature based approach, but I really think it wouldn't have been that difficult to combine the approaches in a single bundled package a long time ago. To go on a nostalgia trip, I remember back in the day even when people started coming out with those 'roll your own' virus engines for script kiddies, which allowed some minor tweaking and customization to foil straight signature approaches. Meanwhile, those crazy bastards in Bulgaria were rumored to be playing with polymorphic virii. To my mind, the problem really isn't one in which a straight biological infectation paradigm works, but one to which something akin to a biowarfare model is more appropriate. Remember that these things don't mutate on their own, but that there will always be a move-countermove going on somewhere. It's the same old thing - if you build better tank armor, someone will come up with better armor piercing rounds, etc.
The performance numbers Anand came up with on this are a little disappointing, in my view. It's nice, of course, to get a few seconds quicker startup of apps or level loads, but I doubt this is really worth it to most of us at this stage (aside from the coolness factor). Once capacity of these rises enough to make them capable of replacing HDs, though, they might be really nifty in the entertainment/HTPC space due to that silent operation. Basically, an interesting concept, still not quite ready for prime time, but getting a lot closer. Worth a quick read, anyway...
i mean remember and this is my lame girlfriend writing in. who wants friends.
Actually, although I'm sure you didn't mean to be misleading, remeber that in certain very limited circumstances you are ethically allowed to claim a specialty (Admiralty and Patent) and you can always mention that you choose to limit your practice to certain areas (i.e. all the "have you been bitten by a dog recently?" ads you see on late night TV).