5 ms·
>And you can't have perfect heuristics 1. All my computers have finite memory 2. You could in theory make heuristics with false positives but without false neg
by terangdom 14y ago
>And you can't have perfect heuristics
1. All my computers have finite memory
2. You could in theory make heuristics with false positives but without false negatives.
- archangel_one 14y agoIt's not that theoretical, the following complex program fits that description: def IsProgramAVirus(program): return True But it's not particularly useful. In practice the false positive rate is extremely important, because if it gets too annoying users will switch it off.
- terangdom 14y agoIn the best of worlds, developers could make an effort not to do anything shady, like self modifying code, dll-injection etc, making heuristics complaining about such behaviours viable.