Foundation for Research and Technology - FORTH
In the ongoing arms race against malware, antivirus software is at the forefront, as one of the most important defense tools in the authors' arsenal. Antivirus software is flexible enough to be deployed from regular user's desktops, to corporate e-mail proxies and file servers. Unfortunately, the signatures necessary to detect incoming malware number in the tens of thousands. To make matters worse, antivirus signatures are a lot longer than signatures in network intrusion detection systems. This leads to extremely high computation costs necessary to perform matching of suspicious data against those signatures.