Gail Shaw wrote:
> "Invisible" <voi### [at] devnull> wrote in message
> news:47835028$1@news.povray.org...
> 
>> Yes. But if the updates only appear once every 24 hours, doing zillions
>> of update checks per day is really quite futile.
> 
> Unless your update runs at 6am and a new version is added an hour later

The cycle goes like this:

1. Destructive virus is released.

2. It takes 72 hours for any AV companies to even notice it exists, much 
less obtain a useable sample for analysis.

3. It takes another 72 hours to analyse the virus and develop a virus 
definition for it.

4. The new definition is deployed.

5. Our server downloads and applies the definition.

My point is, that's 144 hours between the virus being released and the 
virus definition being released. An extra 24 hours before the server 
picks up the new definition seems quite trivial by conparison. The virus 
has already had plenty of time to wreck your entire network, long before 
the AV vendor has anything to offer you...

-- 
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*

Post a reply to this message