Author Topic: get rid of network shield option (redundant)?  (Read 3699 times)

0 Members and 1 Guest are viewing this topic.

Theblob

  • Guest
get rid of network shield option (redundant)?
« on: April 19, 2013, 04:13:21 PM »
so yeah since no one knows what network shield does exactly & the question never really been answered so far, its clear now that the network shield aint really a useful option. so is it possible to get rid of the option in later releases? it just complicates things more


btw network shield only checks for KNOWN malicious sites - but who cares about those, since its the UNKNOWN sites that matter the most. in other words network shield aint got no heuristics or "smart AI" of any sorts to detect suspicious code for unknown sites, so it just clogs up memory with its list of known sites. bug deal
so it can be safely disabled  8)

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89057
  • No support PMs thanks
Re: get rid of network shield option (redundant)?
« Reply #1 on: April 19, 2013, 04:59:41 PM »
Why are you spreading this over three topics are essentially it is the same thing you are asking.

Essentially you are trying to cripple avast to save some RAM and that isn't wise, RAM is cheap, security isn't.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: get rid of network shield option (redundant)?
« Reply #2 on: April 19, 2013, 05:23:50 PM »
If NetworkShield is able to deal with an infected site by simple checking the URL against a database, then there's no point in trying to detect the code on that page. So, that "heuristic" detection may not be present (saving the CPU and memory, if you wish). So, if you disable Network Shield, you get infected.

Theblob

  • Guest
Re: get rid of network shield option (redundant)?
« Reply #3 on: April 19, 2013, 05:29:32 PM »
If NetworkShield is able to deal with an infected site by simple checking the URL against a database, then there's no point in trying to detect the code on that page. So, that "heuristic" detection may not be present (saving the CPU and memory, if you wish). So, if you disable Network Shield, you get infected.
so in other words network shield only useful against known bad sites?

in that case I can disable it cause most threats are unknown (websites change all the time anyway)

Offline schmidthouse

  • VIRUS FREE A Long Time
  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7170
  • When you think you know, Think Again
Re: get rid of network shield option (redundant)?
« Reply #4 on: April 19, 2013, 05:53:05 PM »
If NetworkShield is able to deal with an infected site by simple checking the URL against a database, then there's no point in trying to detect the code on that page. So, that "heuristic" detection may not be present (saving the CPU and memory, if you wish). So, if you disable Network Shield, you get infected.
so in other words network shield only useful against known bad sites?

in that case I can disable it cause most threats are unknown (websites change all the time anyway)

Your logic is flawed. ???

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89057
  • No support PMs thanks
Re: get rid of network shield option (redundant)?
« Reply #5 on: April 19, 2013, 06:20:28 PM »
The overhead from the network shield is minuscule, detections by the web shield eventually result in a site being added to the malicious sites list and would be blocked by the network shield.

There is no holy grail shield, all are working together to provide protection in depth.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: get rid of network shield option (redundant)?
« Reply #6 on: April 19, 2013, 07:39:21 PM »
If NetworkShield is able to deal with an infected site by simple checking the URL against a database, then there's no point in trying to detect the code on that page. So, that "heuristic" detection may not be present (saving the CPU and memory, if you wish). So, if you disable Network Shield, you get infected.
so in other words network shield only useful against known bad sites?

in that case I can disable it cause most threats are unknown (websites change all the time anyway)

I didn't say that... I don't know exactly what processing the Network Shield does, and I don't really care. As I said, even if it were the case now, it may change in the next virus definition update.
What I'm saying is that the protection assumes the shield is there - other, possibly unknown, websites may be redirecting traffic to these sites (there's a lot of redirecting in the malware world) - and when we find out, there's no reason to add another detection (read: "tweak heuristics if it doesn't detect it already") if the payload is actually covered by the "stupid" Network Shield already.

Besides, "known" and "unknown" to you may not be the same as known and unknown to us. We have quite a broad infrastructure and we can deliver the updates of the database (via streaming updates) within minutes, possibly less.

So if you are looking for a heuristics that solves everything - well, good luck with that. Real-time updates and good/fast data sources are quite efficient as well.