search algorithm for antivirus program - 28/04/2018 16:24 EDT

Most new viruses are versions of older ones, polymorphic adaptions of the same thing, so entire ‘families’ of malware can be identified through more generic algorithms. Finally, there’s behavioral detection, where you don’t try and identify the file, you identify it by watching or predicting its actions. But, as to what algorithms are used in signature detection, they are the standard MD5, SHA1 and SHA256 algorithms - the whole industry uses these hashes to communicate and identify new malware signatures.