Overview

Malware hunters generally rely on honey-pots to discover emerging threats and develop signatures for them. These signatures are then delivered to active installations. However, if an attack is targeted for an organization, it is unlikely that it will be trapped in global honey-pots. Organizations typically monitor suspicious behavior to counter such attacks.

Given that anti malware tools are not the only source of threat signatures, the key challenge that security practitioners face is how they scan their large network for a known signature that is not available yet in their antimalware system.