Please Help Me Understand Cloud-based AV

[iron7]

This seems to be a strong trend in AV, but companies don't always explain in detail how their cloud-based behaviors work.

I am not comfortable with companies uploading files on my computer to a cloud for analysis. Are there any cloud-based AV behaviors that do not upload files in such a way? Or is that the definition of AV with cloud behaviors?

Seeing how strong this trend is, my last question would be: if a user does not want an AV to upload any of their files, what are some good options in terms of AV right now?

 

[samuria]

The problem is there are thousands of new virus every day when you scan your using only a small database that may be out of date and as it's not a full list as it would be too big. So the only way if they find a file with virus like code is to upload it so they can use the full database and if it turns out to be a new virus they can work out a removel procedure

 

[iron7]

The problem is there are thousands of new virus every day when you scan your using only a small database that may be out of date and as it's not a full list as it would be too big. So the only way if they find a file with virus like code is to upload it so they can use the full database and if it turns out to be a new virus they can work out a removel procedure

Pardon my perhaps vague inquiry, but this is the aspect I was really curious about:

Are there any cloud-based AV behaviors that do not upload files in such a way? Or is that the definition of AV with cloud behaviors?

- if a user does not want an AV to upload any of their files, what are some good options in terms of AV right now?

 

[mrjimphelps]

I use Trend Micro. It is not cloud based; it runs everything locally on the computer. However, it does phone home regularly to get antivirus updates. But it never uploads my files to any cloud; it checks them on the computer.

There are lots of antivirus programs which work this way. I'm pretty sure Norton works this way as well.

 

[Barman58]

Most Anti Malware systems (AM), in use these days are far more than an Antivirus.

Some do have a cloud component to their operation which by the nature of the cloud must involve uploading the file to the company, the only alternative would be to give the company free access to your system to perform the check in place.

Some AM are completely cloud based so send everything to the company for checking.

The vast majority only download the definition files for use by the local AM system, or will ask you if you wish to send a potentially infected file to the company for checking, so you are in control