Sana Security Inc is to release two new client security products designed for unmanaged environments, both of which will include the company’s new behavior-based spyware detection and removal technology.
The SafeConnect software and SafeConnect OnDemand, the ActiveX version, will be offered under the company’s Primary Response brand umbrella. SafeConnect will be sold as a packaged application for $24.95.
The company said that both products will feature the latest version of its Active Malware Defense Technology, kernel-level algorithms that watch how software interacts with the system and tries to figure out if it is malicious or not.
According to executives, Active MDT is now suitable for detecting and removing complex, intrusive programs like spyware and adware, without the need for signatures or definition files, and now it can remove it too.
The software watches how programs interact with the system, looking for behavior such as automatic reinstallation, hiding files, and the lack of a user interface, which in combination could indication malicious activity.
Any one suspicious behavior is not enough to define it as malicious, Sana chief technology officer Vlad Gorelik said. And it’s not just looking at negative things, it’s looking at the trade-off between good and bad.
The company says this kind of technology is a useful complement to signature-based antivirus. People often do not keep their antivirus up-to-date, and even if they do there is a delay between the release of a threat and its signature.