Tuesday, June 23, 2015

Windows 10 adds new Antimalware Scan Interface (AMSI)


Nice to know Microsoft is getting better with security



From the article:

The goal of the new Antimalware Scan Interface (AMSI) is to let applications send content to the locally installed antivirus product to be checked for malware.


According to Microsoft, this can have important benefits when dealing with script content in particular, because malicious scripts are commonly obfuscated to bypass antivirus detection. Scripts also typically get executed in the memory of the applications that are designed to interpret them, so they don't create files on disk for antivirus programs to scan.

Scripting is not the only type of content that can be scanned with this new feature. Communication apps could scan instant messages for viruses before displaying them to users and games could scan plugins before installing them




For more info:
http://www.csoonline.com/article/2934872/application-security/windows-10-will-allow-apps-to-actively-scan-their-content-for-malware.html


No comments:

Post a Comment