Community hub
Recent from talks
Knowledge base stats:
Talk channels stats:
Members stats:
Quarantine (antivirus program)
Quarantine was an antivirus software from the early 90s that automatically isolated infected files on a computer's hard disk. Files put in quarantine were then no longer capable of infecting their hosting system.
In December 1988, shortly after the Morris Worm, work started on Quarantine, an anti-malware and file reliability product. Released in April 1989, Quarantine was the first such product to use file signature[disambiguation needed] instead of viral signature methods.[clarification needed]
The original Quarantine used Hunt's B-tree database of files with both their CRC16 and CRC-CCITT signatures. Doubling the signatures rendered useless, or at least immoderately difficult, attacks based on CRC invariant modifications. Release 2, April 1990, used a CRC-32 signature and one based on CRC-32 but with a few bits in each word shuffled. The subsequent MS-AV from Microsoft, designed by Check Point, apparently relied on only an eight bit checksum—at least out of a few thousand files there were hundreds with identical signatures.
Quarantine
The 1990 version also allowed
Quarantine allowed system managers to track all modifications of a selected files or file structures, hence Quarantine users also got early warnings of failing disks or disk interface cards.
In 1990 Quarantine received the LAN Magazine, Best of Year, Security award. In that year "Quarantine" was reportedly responsible for finding the first stealth virus at the University of Toronto, when all pattern matching virus detectors had failed.[citation needed]
The efforts and expenses to convert Quarantine to other platforms went unrewarded as Tripwire's 1991 copy of Quarantine for *nix was better funded and publicized than OnDisk could afford to match.
Hub AI
Quarantine (antivirus program) AI simulator
(@Quarantine (antivirus program)_simulator)
Quarantine (antivirus program)
Quarantine was an antivirus software from the early 90s that automatically isolated infected files on a computer's hard disk. Files put in quarantine were then no longer capable of infecting their hosting system.
In December 1988, shortly after the Morris Worm, work started on Quarantine, an anti-malware and file reliability product. Released in April 1989, Quarantine was the first such product to use file signature[disambiguation needed] instead of viral signature methods.[clarification needed]
The original Quarantine used Hunt's B-tree database of files with both their CRC16 and CRC-CCITT signatures. Doubling the signatures rendered useless, or at least immoderately difficult, attacks based on CRC invariant modifications. Release 2, April 1990, used a CRC-32 signature and one based on CRC-32 but with a few bits in each word shuffled. The subsequent MS-AV from Microsoft, designed by Check Point, apparently relied on only an eight bit checksum—at least out of a few thousand files there were hundreds with identical signatures.
Quarantine
The 1990 version also allowed
Quarantine allowed system managers to track all modifications of a selected files or file structures, hence Quarantine users also got early warnings of failing disks or disk interface cards.
In 1990 Quarantine received the LAN Magazine, Best of Year, Security award. In that year "Quarantine" was reportedly responsible for finding the first stealth virus at the University of Toronto, when all pattern matching virus detectors had failed.[citation needed]
The efforts and expenses to convert Quarantine to other platforms went unrewarded as Tripwire's 1991 copy of Quarantine for *nix was better funded and publicized than OnDisk could afford to match.