Anti-virus software application is very important for protecting the computers, it acts like a defense to protect sensitive data and information. The main aim of this application is to scan the entire system to identify and remove any virus or other threats. In addition, these applications also fight all the new virus and other threats before entering into the system.
Image via Wikipedia
This anti-virus application identifies virus from the files and also identifies other application that might plant any infectious virus into the system. The anti-virus application uses two approaches to eliminate threats: suspicious behavior approach and virus dictionary approach.
In the suspicious behavior approach, the anti-virus monitors the software applications and its function. In this method, the anti-virus never try to identify known virus, but it flags any program that tries to write any executable code on the system. This approach flags the suspected application and issues warning message to the user with the recommendation for any actions.
This suspicious approach is very useful in identifying the new virus as it does not rely on the virus dictionary. This method is very much annoying for the user because it raises many false alarms and user gradually ignores the warning message which may lead to plant any virus.
In virus dictionary approach, after detecting new virus, it is added to the dictionary with all the information about the virus such as name, author, causes, and behavior. The anti-virus programs compare the suspicious programs or files with the dictionary and delete or repair it. In this method, to stay updated, the anti-virus must update the dictionary regularly.
