Viruses are theoretically indeterminable A virus is a program, and the code for different kinds of viruses varies so much that it is impossible for anyone to predict what new viruses will appear tomorrow. But one thing is for sure, as soon as a new computer technology emerges, a new virus that takes full advantage of this new technology is not far away. And because software is so diverse, and because some normal programs use virus-like operations or even borrow techniques from viruses, there are some people who use viruses to exploit certain aspects of the software. Therefore, although some people take advantage of the virus some **** have the operation (such as resident memory, change interrupt) this **** nature, the production of the program claimed to be able to check all the viruses, but this method of detecting viruses will inevitably result in a greater number of false positives, is not reliable enough, at present can only be used as a complementary means of cooperation, can not be promoted independently. In fact, the originator of computer virology as early as in the early 80s has put forward the model of computer viruses, proving that as long as the extension of the current computer system, computer viruses, there is "non-judgmental". To kill a virus, one must first collect a sample of the virus to make it a known virus, then analyze the virus, and then reverse the exact process of virus infection to restore the infected computer to its original state. Therefore, it can be seen that on the one hand, computer viruses are not extinct, and on the other hand, viruses are not scary, and there is no virus in the world that cannot be killed. Commonly used anti-virus software technology Feature code technology: based on the analysis of known viruses, check the anti-virus technology Most of the current anti-virus software uses the method is mainly a feature code checking program in parallel with the manual detoxification, that is, in the checking of viruses using the feature code checking in the killing of viruses using manually compiled detoxification code. Characteristic code detection program is actually a simple expression of the experience of manual virus detection, which reproduces the general method of manual identification of viruses, the use of "the same virus or a part of the same type of virus code is the same" principle, that is to say, if the virus and its variants, deformation of the virus has the same sex, it can be described on this same sex, and Through the program body and the description of the results (i.e., "feature code") to find the virus. Not all viruses can be characterized, and many viruses are difficult or even impossible to characterize. The use of signature technology needs to realize some additional functions, such as the recent compressed packages, compressed executable file automatic detection technology. However, feature code virus checking scheme also has great limitations. The description of the signature depends on human subjective factors, and fetching a virus signature of more than ten bytes from a virus body that is thousands of bytes long requires tracking, disassembling, and other analyses of the virus, and if the virus itself has anti-tracking techniques and deformation and decoding techniques, then tracking and disassembling to obtain the signature will become extremely complicated. In addition, in order to capture the signature code of a virus, it is necessary to obtain a sample of the virus, and then due to the different descriptions of the signature code, the signature code method is difficult to get wide-area support in the international arena. The main technical shortcomings of feature code virus detection are the large number of false positives and false alarms, while antivirus technology has led to technological stagnation in anti-virus software. Virtual Machine Technology: Heuristic Detection of Unknown Viruses The main function of virtual machine technology is to be able to run a description language with certain rules. Since the ultimate criterion for determining a virus is its replication and infectiousness, and this criterion is not easy to use and realize, if the virus is already infected before determining that it is a virus, it will certainly bring trouble to the removal of the virus. So what methods are used to check for viruses? Objectively speaking, among all kinds of virus checking methods, the eigenvalue method is the method with the widest scope of application, the fastest speed, the simplest and the most effective. However, due to its own defective problem, it is only applicable to known viruses. For unknown viruses, if you can let the virus run under control for a period of time first and let it restore itself, then the problem will be relatively clear. It can be said that the virtual machine is the best choice in this case. Virtual machines are widely used in anti-virus software and have become a current trend in anti-virus software. A more complete virtual machine, not only able to identify new unknown viruses, but also able to remove unknown viruses, we will find that this anti-virus tool is no longer a program, but become a ibm deep blue supercomputer that can fight against Kasparov. First, the virtual machine must provide enough virtualization to complete or nearly complete the "virtual infection" of the virus; second, although the "infection" criterion based on the definition of the virus is clear, this criterion, if implemented, will still be problematic in determining the virus. Third, if the previous step can be passed, then we must detect and confirm that the so-called "infected" file is indeed infected with the virus or its variant. Currently, virtual machines deal mainly with file-based viruses. For the boot type virus, word / excel macro virus, Trojan horse program in theory can be handled by the virtual machine, but the current level of implementation is still far away. Just as virus coding distortions invalidate traditional eigenvalue methods, new viruses targeting virtual machines can easily invalidate them. Although virtual machines will also continue to evolve in practice. However, pc's have limited computing power and limited manufacturing costs for anti-virus software, while viruses can evolve indefinitely. The difficulty of making virtualization technology more practically effective, or even to use it as a basis for removing unknown viruses, is considerable. Constrained by the fundamental premise that viruses are theoretically undecidable, the fact is that neither heuristics nor virtual machines are anything more than engineering endeavors with a 100% probability of success. This is the only but unavoidable shortcoming. The Future of Anti-Virus Technology: Virtual Reality The vision of future technology may be an almost fanciful one, but just as computer viruses were first depicted in science fiction, there are still many technologies that we are currently realizing that have not yet been realized, and many factors that we have not even considered. It is entirely possible that AI-like anti-virus technology will emerge in the cyber world, provided that the technology is mature enough. One of the problems with the future of anti-virus is that we will never be able to write a reasonable program to recognize and kill viruses. Viruses have mastered everything that humans have mastered; they can also recognize and analyze anti-virus programs and reprogram themselves, while anti-virus programs will likely detect viruses and reprogram themselves in the same way. Virus and anti-virus program competition becomes the realization of self-programming capabilities, and this can only result in cyberspace tension, or even collapse! We can also consider another approach: the method of artificial entry into the world of computational networks to detect and kill viruses. People have enough intelligence and experience to recognize and kill viruses, and it is only a matter of building a "bridge" between people and computers. The current virtual reality technology focuses on the realization of the computer description of the "senses", which is the way of communication between human beings and nature, just as all people's perceptions are ultimately sensed to the brain, and the brain makes an experiential description of the sensations, thus making the human experience of the virus. The brain makes an experiential description of this sensation, thus forming a perceptual consciousness. If a computer expresses a stream of binary code as a stream of brainwave information and senses it to the brain through the nerves, then it can completely describe, guide, and control all human thinking. Simply put, such a universal interface exists between the human mind and computer language! If this theory is realized, virtual reality technology will enter a new field of development. Although theoretically it is not possible to make precise judgments on the case of unknown viruses and thus prevent them, but in practice, after years of statistics, analysis, research and experience accumulated by anti-virus experts, it is entirely possible to probabilistically carry out a kind of hierarchical system of determination of the danger of viruses and their use of anti-virus programs, to a considerable extent, to achieve a more accurate defense against the intrusion of unknown viruses. The third generation of anti-virus products: both anti-killer, universal recovery From the mathematical model of technology, the past, present and future anti-virus software is not likely to have any theoretical beyond, that is, unable to cross the chasm of non-determinable, feature code or heuristic virtual machine or both, or both, with each other, for the time being, there will be no new breakthroughs. Then, specific to the anti-virus technology products, but also basically inseparable from these patterns. Of course, even from the engineering point of view, in the same technical starting point how to construct the realization and final effect of completely different practical products, is still a never-ending pursuit. From manual virus checking, to the early days of the foxhole type of virus checking and killing, to the Internet technology, until today's third-generation anti-virus software to take on the role of both prevention and killing, universal recovery, anti-virus technology in the fight against viruses continue to progress, and continue to give birth to a variety of anti-virus products for the computer users to solve the problem. From the early anti-virus card, manual checking of the dos version of the software (i.e., the first generation, the representative products are: kill, kv100, kv200, kv300, Rising Star, early vrv, early avxx.), to the online monitoring and real-time checking of the virus firewall (i.e., the second generation, the representative products for the vrv antivirus suite, killxx version, kv3000 preview version), we have already found that to be exempt from the disaster of virus, antivirus is not enough. Security experts believe that true security with antivirus alone is not enough, because in the computer world, there are always elusive things wandering around. In addition to the proliferation of viruses, system vulnerabilities, hardware or software conflicts, human error, the use of bo Trojan horse malicious attack, the instability of the computer itself, hacker attacks and other forms of security threats are countless. Therefore, a good security software, only to kill the virus is not enough, it must be backed up and disaster recovery combined. In the face of the whistling coming more and more vicious future virus, only anti-virus is not enough. Users for the fear of viruses, not from its ability to self-replication, although this is the reason why the virus has become the root of the virus, the fear of fear is the virus invasion and seizure, the results caused by large and small irreparable losses. This objective and urgent need to become the new situation on the anti-virus technology and products put forward the highest requirements. Thus, the third generation of anti-virus software must be done to break through the limitations of a single anti-virus, for the user often face the urgent need for data repair, system recovery and other difficult problems, not only can kill the invasion of viruses, routed by the offending hackers, eliminate harmful data, as well as intelligent disaster recovery, holographic data rescue, the maintenance of the normal operation of the system for the overall protection of information security features, the representative of the product is the Beijing Beixinyuan company developed a The representative product is an all-round, multi-functional and highly reliable security software "Antivirus Expert" developed by Beijing Beixinyuan Company. We expect that there is a malicious virus attack may be carried out during the destruction of the interception, blocking device, software or hardware, with a dangerous level of all possible impact on the system operation and information security operations to be prohibited, like filtering files in the virus characteristics of the same code, a will be carried out on the operation of the security judgment. Just as today's real-time antivirus firewalls have been rejuvenated in a multitasking environment, it is not difficult to predict that such online anti-virus technologies and products featuring dangerous behavior monitoring will also emerge to work with previous first-, second-, and third-generation anti-virus technologies to achieve a higher sense of more reliable information security.

Thanks for the adoption!