Generations of Antivirus Software

• First: simple scanners (record of program lengths)

• Second: heuristic scanners (integrity checking with checksums)

• Third: activity traps (memory resident, detect infected actions)

• Fourth: full-featured protection (suite of antivirus techniques, access control capability)