Yandex has become a little antivirus

[Объединенное Детективное Бюро]

Yandex will begin to determine for itself whether there are viruses on the sites to which it offers to go to the user. To do this, the search robot will pretend to be a user and wait for an attack.

The second line of antivirus protection will appear in the issuance of Yandex, reports Lenta.ru. In addition to the protection currently used by the anti-virus company Sophos, Yandex will also integrate its protection. Outwardly, nothing will change for the user: Yandex will continue to warn him that the site may harm the computer - just the search engine will be equipped with an additional analyzer.

Yandex technology is a behavioral analysis. The search robot, crawling the page, "pretends" to be a regular user and checks what is happening. If a site tries to upload a file, run a program, or do something else suspicious, it is marked as viral. Yandex is sure that the infected sites will not be able to deceive them, giving the search robot clean content, and the users - infected. “When creating an antivirus, we used the best practices obtained in the fight against search spam,” the company’s press service explained.

“Over the past few years, while working to improve search, we have gained quite a lot of experience in the fight against search spam and viruses; In addition, the Yandex robot visits millions of pages daily, which allows developing Internet bypass technology for detecting viruses - antivirus companies do not have such capabilities. Therefore, we decided to create our own anti-virus technology, ”said a representative of Yandex. It should be noted that Google, for example, does not use its own virus filtering technology, giving this task to the antivirus companies and StopBadware. Yandex knows more about Runet than StopBadware, we are confident in the company.

Yandex technology still does not protect against all possible troubles. Firstly, there is no reliable protection against cloaking. Secondly, although Yandex often crawls sites, the time between its two “visits” is quite enough to infect a sufficient number of users. Thus, the protection built into the search engine will still not replace the desktop antivirus.

“The desire of the largest Russian search and service provider to protect users deserves respect. It should be noted that the development of antivirus protection in browsers and search engines follows the path that key personal antivirus products have already passed. To one degree or another, the antivirus industry already provides secure web surfing to its users. Somewhere, this was decided on the basis of a preliminary scan of links, somewhere executable scripts and downloaded content are scanned, somewhere the user goes online under the guise of a “sandbox” in a virtual environment. Outpost protects Windows users from malicious code using the Web Control modules, which allow you to block infected sites and vulnerable Internet content (Active Content) in advance, and Local Security (HIPS), which controls the interaction of programs and the OS, preventing penetration and activation of unknown threats on the user's PC.



Yandex developers are right in that relying on one type of protection is ineffective - reactive (signatures) and proactive protection (including preventing infection based on heuristics and behavioral analysis) are good in tandem. The only question remains is whether the robot will be able to imitate the surprise that the user will experience if access to key sites is blocked - everyone knows examples of false positives for personal products that paralyzed communication and movement of search engine users on the Web, ”commented Vitaliy Yanko, commercial director of Agnitum.
Vitaliy Yanko, Agnitum, Sales and Marketing Director:

The development of antivirus protection in browsers and search engines follows the path that key personal antivirus products have already passed

The link is not valid

 

[Матушкин Андрей Николаевич]

Thank!