Ray

signature issue

Recommended Posts

2010.02.01 3604575

2010.02.02 3606431

2010.02.03 3622187

2010.02.04 3622239

2010.02.06 3633284

2010.02.07 3623548

2010.02.08 3600907

2010.02.09 3604954

2010.02.11 3597243

2010.02.12 3581170

I did a record of number of signature.

Oddly enough It's decreasing

Share this post


Link to post
Share on other sites

52,000 signatures less in 5 days. Is this part of the signature consolidation between the A-Squared and Ikarus databases that has been mentioned previously?

Share this post


Link to post
Share on other sites

52,000 signatures less in 5 days. Is this part of the signature consolidation between the A-Squared and Ikarus databases that has been mentioned previously?

No, it is part of IKARUS' own signature consolidation and completely normal.

Share this post


Link to post
Share on other sites

It would be useful for all customers if that information was posted with the signature numbers so that apparent discrepancies are explained.

Share this post


Link to post
Share on other sites

It would be useful for all customers if that information was posted with the signature numbers so that apparent discrepancies are explained.

Most customers don't care. The whole misconception is that more signature equals better detection which is not always the case. So instead of thinking "hey, they removed 50k signatures so they must be worse now" they should say "well, looks like they removed variant detections in favor of generic signatures - good for me!".

Additionally giving explanation for every signature change is just not practical for several thousand alterations on the database each day. It will slow down the whole process even more and it is hardly manageable as it is now given the masses of new malware each day.

Share this post


Link to post
Share on other sites

Well, even if it is a misconception, it still causes confusion. You don't need to explain every signature change, simply the reason why the number of signatures can vary so dramatically. It would reassure those customers who take the time to check it out and would also result in fewer posts questioning the discrepancy.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.