Scope of Protection:  

Traditional Signature Based Protection is the first line of defense. And while other technologies are being developed to get the viruses that signatures can’t, fingerprinting and signature protection are still essential. Norton’s huge (and growing) database of known malware will keep your computer safe from threats. One of the best parts about AntiVirus 2010 is the Norton Insight technology. This feature allows Norton to only scan the files that might be at risk, bypassing the trusted files and files that haven’t changed, so the scans don’t waste time and run significantly quicker (not to mention smarter), even getting quicker over time.

SONAR 2 is Norton’s second iteration of the advanced heuristic protection technology. SONAR stands for Symantec Online Network for Advanced Response, and takes a proactive approach to detecting malware by observing file behavior in real-time to monitor malware-like behaviors to stop viruses (that either manage to bypass other methods or are new enough that they haven’t been tagged as malware) before they have the chance to infect your computer.

Traditional signatures and advanced heuristics are great (and Norton does a great job with them), but one thing that really sets Norton apart is their new technologies that are attempting to find that last 1% of viruses that are so new or tricky they can’t be caught by other methods. This unique and innovative approach is based on reputation scanning, and the two main features in this endeavor are Download Insight and Reputation Technology.

Reputation Technology is the new proactive security measure from Symantec. Basically, it involves a special algorithm to analyze files and determines their relative threat based on reputation, based on their source, digital signature, age, and popularity. This innovative new technology isn’t a specific tool or feature, it is an overall approach that works in conjunction with several Norton technologies to deliver a more balanced, efficient security solution.

Download Insight is specifically designed to stop new malware before you accidentally/mistakenly download it. Basically, Norton provides you with necessary information on any file (obtained from years of research and anonymous information provided by the Norton Community Watch) immediately when you attempt to download it, so you can make an informed decision. This happens in real-time, so you don’t have to wait. The File Insight gives you access to a good deal of information (number of users, reputation, where it came from), but if you don’t want it you can configure the software to only show you when a risky file is found.

The only time a warning popup appears is if you’re attempting to download a file that hasn’t been deemed trustworthy yet. For example, let’s say you go to facebook (but in actuality it is a fake malware trap) and are prompted to install a new codec to view some video. If Download Insight warns you that the download isn’t trusted and may be harmful, you might want to reconsider (after all, what are the chances that you’re the first to try and download this codec).