McAfee QUICKCLEAN 3.0 User's Guide download pdf (Page 10)

• Block future downloads of the same file: Subsequently, if the file is found to be malicious, your

anti-malware protection must prevent future downloads of the same file or its variants.

• Identify and remediate affected hosts: Your security system must be able to identify the host which

executed the malware, and also detect the hosts to which it has spread. Then, it must provide an

option to quarantine the affected hosts until they are clean again.

The McAfee Advanced Threat Defense solution

A security solution that relies on a single method or process might not be adequate to provide

complete and reliable protection from malware attacks. You might need a multi-layered solution that

involves various techniques and products. The solution can include pattern matching, global

reputation, program emulation, static analysis, and dynamic analysis. All these layers must be

seamlessly integrated and provide you with a single point of control for easy configuration and

management. For example, pattern matching might not detect zero-day attacks. Similarly, static

analysis takes less time than dynamic analysis. However, malware can avoid static analysis by code

obfuscation. Malware can escape dynamic analysis too by delaying execution or take an alternate

execution path if the malware detects that it is being run in a sandbox environment. This is why a

reliable protection from malware requires a multi-level approach.

There are other industry-leading McAfee anti-malware products for the web, network, and endpoints.

However, McAfee recognizes that a robust anti-malware solution requires a multi-layered approach,

the result of which is McAfee Advanced Threat Defense.

The McAfee Advanced Threat Defense solution primarily consists of the McAfee Advanced Threat

Defense Appliance and the pre-installed software. The McAfee Advanced Threat Defense Appliance is

available in two models. The standard model is the ATD-3000. The high-end model is the ATD-6000.

McAfee Advanced Threat Defense integrates its native capabilities with other McAfee products to

provide you a multilayered defense mechanism against malware:

• Its preliminary detection mechanism consists of a local blacklist to quickly detect known malware.

• It integrates with McAfee

Global Threat Intelligence

™

(McAfee GTI) for cloud-lookups to detect

malware that has already been identified by organizations throughout the globe.

• It has the McAfee Gateway Anti-Malware Engine embedded within it for emulation capability.

Malware detection and McAfee

Advanced Threat Defense

The McAfee Advanced Threat Defense solution

McAfee Advanced Threat Defense 3.0.4 Product Guide

1 2 ... 5 6 7 8 9 10 11 12 13 14 15 ... 139 140

No comments

McAfee QUICKCLEAN 3.0 User's Guide Page 10