Security Strategies in Linux Platforms and Applications, 3rd Edition

Endpoint Security for Linux Systems

A more common approach than anti-malware today is endpoint security. Endpoint security solutions do more than just looking for malware on systems. One of the problems with traditional anti-malware is they are too often based on signatures like cryptographic file hashes. There are multiple problems with this. One of them is it requires a signature, which means there will always be a period of time the malware can’t be detected until a signature is created. Additionally, anti-malware expects commodity malware, meaning malware that is used across a large number of users. Many threat groups will create malware specifically for a target, so existing signatures won’t match this targeted malware. There is also polymorphic ...