Signature-based detection

Signature-based detection compares files with a database of recognisable patterns belonging to known malware. A matching signature indicates a known threat. The database needs updating as new malware is identified; unfamiliar malware may not match an existing signature.