Anti-Malware
Also known as:AM
Anti-Malware: Technologies for detecting, blocking, and removing malicious software. Defense requires robust preventionPreventionMeasures intended to stop security incidents or attacks before they occur., meaningful loggingLoggingThe recording of security-relevant events so activity can be monitored, investigated, and audited., timely detectionDetectionThe capability to identify suspicious activity, attacks, or policy violations in time., and clearly defined response measures.
How it works and where it fits
Anti-Malware is a preventive, detective, or corrective security control. Its effect depends on where it sits in the architecture, which data and decisions it processes, and how it might be bypassed. A control reduces a defined risk but rarely removes it completely, so it should be combined with additional layers of protection.
Practical security relevance
Before deployment, the objective, ownership, coverage, and expected behavior should be defined. Secure defaults, controlled exceptions, logging, and periodic effectiveness tests matter more than installation alone. Operational metrics should expose both blocked or detected activity and gaps, false alerts, and effects on legitimate business processes.
Related concepts
- MalwareMalwareUmbrella term for software with malicious or unwanted functionality.: Umbrella term for software with malicious or unwanted functionality.
- Endpoint Protection PlatformEndpoint Protection PlatformBundles preventive security functions such as malware protection, firewalls, and device control.: Bundles preventive security functions such as malware protection, firewalls, and device control.
- Endpoint Detection and ResponseEndpoint Detection and ResponseContinuously monitors endpoints and supports detection, investigation, and containment.: Continuously monitors endpoints and supports detection, investigation, and containment.
- Trojan HorseTrojan HorseMalware that masquerades as legitimate or useful software.: Malware that masquerades as legitimate or useful software.