Discussing about Kasperky Security Network

I am just curious about the working mechanism of KSN, as discussed by Dawgg in one of his posts, that KSN comes into play even if a signature of a malware is not released(i.e. malware is detected in cloud).
https://www.wilderssecurity.com/showpost.php?p=1535935&postcount=12

 

This might be helpfull
http://support.kaspersky.com/faq/?qid=208280156

 

I think that tech support article explains the system pretty well....KSN is the cloud component of KAV/KIS and is being actively developed further....the KSN detections you see in dawgg's post are examples of detections using the UDS part of KSN (Urgent detection system)...KL classifies many files on-the-fly using data sent by the KSN.... so a file is seen by a user who is participating in KSN and the file has some unusual attributes...details of this file are sent to the KL servers where they are seen by an analyst who can determine if a file is bad or not...if the file is bad, the analyst issues an update via UDS which can protect all of the users participating in KSN from this threat within 40 seconds of first detection (during the time between it is first seen ITW and a signature is issued)

 

Thanks for the insights Baz !!!