Re: Time for a new FWTK?

[Damir Rajnovic <Damir.Rajnovic () eurocert net>]

At 4:42 -0800 1/12/97, Bennett Todd wrote:
> On Fri, Nov 28, 1997 at 11:01:32PM -0500, Marcus J. Ranum wrote:
> > [ talking about signature analysis in general and virus scanners in
> >   particular ]
> > My guess is that they'll evolve into something else.
>
> Some interesting research directions are discussed in
> <URL:http://www.sciam.com/1197issue/1197kephart.html>:
>
>    Fighting Computer Viruses

More interesting article is "An immunological Approach to Change Detection:
Theoretical Results" by Patrik D'haeseleer

But this approach leaves another open backdoor - slowly mutating virii.

Cheers,

Gaus

---------------------------------------------------------------
EuroCERT                                tel: (+44 1235) 822 382
c/o UKERNA                              fax: (+44 1235) 822 382
Atlas Centre
Chilton, Didcot
Oxfordshire OX11 0QS, UK