Is anti virus definition and engine updater vulnerable to MiMA attack
Solved! Go to Solution.
from: McAfee Corporate KB - FAQs for V2 DAT files KB55986
What integrity and validity checks are performed on the DAT files to ensure they are not tampered with?
The DAT files are encrypted and then compressed and signed when they are compiled. The Antivirus Engine performs a signature verification on the DATs as an integrity check during initialization and will not load them if they have been modified. The products that utilize the Engine in turn verify the integrity of the Engine by checking whether the digital certificate used to sign the Engine is valid.
I doubt it. The software only contacts secure servers and the software itself has a self-protection module which is switched on by default. (Called Access Protection).
This question however is best answered by an expert. I'll ask my contacts as to who to alert to your question.
Moved from Consumer to General Discussion >Discussions
BTW it may be some time for someone to chip in here due to the holidays.
from: McAfee Corporate KB - FAQs for V2 DAT files KB55986
What integrity and validity checks are performed on the DAT files to ensure they are not tampered with?
The DAT files are encrypted and then compressed and signed when they are compiled. The Antivirus Engine performs a signature verification on the DATs as an integrity check during initialization and will not load them if they have been modified. The products that utilize the Engine in turn verify the integrity of the Engine by checking whether the digital certificate used to sign the Engine is valid.
Thank you Vinoo
We can (always) count on you.
All the Best,
Cliff/CD
Thanks Vinoo!
- David
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership: