Validating components of a malware scanner

摘要

In a malware scanner containing an updating program 20, a malware scanner engine 22 and malware definition data 24, the malware scanner engine 22 and the malware definition data 24 cross-check each other for validity. More particularly, each includes its own signature 26, 30 as well as public key information 28, 32 for checking the other. There is no dependence upon the updating software 20 for information required in the validating of the malware scanner engine 22 or malware definition data 24. The malware definition data 24 can include program code operable to utilize the validating data 32 embedded within the malware definition data 24 for checking the signature 26 of the malware scanner engine 22.